Question

Database encryption for backup and DB instances

Hiya. I’ve been using AWS previously, and they provide the ability to encrypt their DB instances with a private key. This requires some level of trust in AWS of course, but in general it ticks the compliance box for clients which require extra security. How is security implemented for your Managed Database clusters? Are DB instances and backups encrypted at rest? Hit me with as much detail as you’re allowed to, and I’ll comb through it. I’m tossing up the idea of putting my next project on DO rather than AWS, as I’d like to see how your Managed Database service stacks up, but my client is a bit security-minded, so I’ll need some ammo!

Show comments

Submit an answer

This textbox defaults to using Markdown to format your answer.

You can type !ref in this text area to quickly search our full set of tutorials, documentation & marketplace offerings and insert the link!

Sign In or Sign Up to Answer

These answers are provided by our Community. If you find them useful, show some love by clicking the heart. If you run into issues leave a comment, or add your own answer to help others.

Want to learn more? Join the DigitalOcean Community!

Join our DigitalOcean community of over a million developers for free! Get help and share knowledge in Q&A, subscribe to topics of interest, and get courses and tools that will help you grow as a developer and scale your project or business.

Was looking for the same info and found the answer here: https://www.digitalocean.com/blog/just-how-managed-are-digitaloceans-managed-databases

Under security section, it mentions “we encrypt data at rest with LUKS and in transit with SSL”

Hello,

For the managed databases, Data is encrypted at rest with LUKS and in transit with SSL. You might be interested to have a look at the below Product docs which talks more about the Managed Databases:

https://www.digitalocean.com/docs/databases/

If you have any further questions you could share it here or you may write to DigitalOcean support as well.