Customer-managed encryption keys

Use a customer-managed key to encrypt your instance’s object storage with a key that you own:

  • AWS: A key in AWS Key Management Service (KMS)
  • Azure: A key in Azure Key Vault

You can revoke InfluxData’s access to the data at any time.

To set up a customer-managed key, contact your InfluxData representative.

AWSAzure
EncryptsAmazon S3 objectsAzure Blob Storage
Where the key is storedAWS Key Management Service (KMS), in your AWS accountAzure Key Vault, in your Microsoft Entra tenant
Existing dataOnly objects written after you enable the key use itAll existing data uses the key as soon as you enable it

Deleting or disabling the key makes your data unusable

If you delete or disable the key, neither you nor InfluxData can use the data in your instance’s object storage.

Was this page helpful?

Thank you for your feedback!