How deeply does MongoDB 8.0 in Action, Third Edition cover Atlas In-Use Encryption?

Explains client-side encryption, key custody, encrypted documents, and query processing without detailing configuration steps.

Atlas In-Use Encryption

As explained in MongoDB 8.0 in Action, Third Edition

Atlas In-Use Encryption is a MongoDB security feature that keeps sensitive data encrypted on the client while it is processed and stored by the database.

Atlas In-Use Encryption keeps sensitive fields encrypted on the client before database processing and storage, so Atlas never receives plaintext. Authorized clients decrypt results only after retrieval. section 20.5.4

Key implementation characteristics:

Uses client-side field-level encryption (CSFLE) or Queryable Encryption for protected application data. section 20.5.4
Keeps decryption keys exclusively accessible to the application, preventing database administrators from viewing protected values. section 20.5.4
Supports external key management through AWS KMS, Azure Key Vault, GCP KMS, KMIP-compliant managers, or HashiCorp Vault. section 20.5.4

Encrypted customer field

An application encrypts a customer's Social Security number before sending the document. MongoDB stores a binary encrypted value instead of the plaintext field.

How MongoDB 8.0 in Action, Third Edition covers it

Cover of MongoDB 8.0 in Action, Third Edition

liveBook manning.com

Read MongoDB 8.0 in Action, Third Edition on liveBook Get the book at manning.com

Related concepts

Queryable Encryptionhas part · Queryable Encryption is a MongoDB encryption feature that permits supported queries over encrypted fields while keeping their plaintext values hidden from the database service.
client-side field-level encryptionhas part · Client-side field-level encryption (CSFLE) is a MongoDB technique that encrypts selected document fields in the client application before they are sent to the database.
encryptionkind of · Encryption is the cryptographic transformation of readable data into ciphertext to conceal its contents, reversible through decryption with appropriate information.

This explainer was generated by Manning's knowledge graph from the text of MongoDB 8.0 in Action, Third Edition. The section links point to the parts of the book it draws on.