How deeply does Architecting an Apache Iceberg Lakehouse cover server-side encryption?

Defines encryption at rest and identifies key-management and audit integrations, but does not detail cryptographic implementation.

Server-side encryption

As explained in Architecting an Apache Iceberg Lakehouse

Server-side encryption is encryption performed by a storage service before data is persisted and decrypted when authorized data is accessed.

Server-side encryption shifts encryption-at-rest responsibilities to the object storage service, protecting persisted data without requiring client application changes. section 5.2.2

Its architectural role includes:

Using platform-managed encryption by default, with customer-managed keys or hardware security modules available on supported services. section 5.4.4
Supporting compliance through integration with IAM, access logging, audit services, and policy management. section 5.2.2 section 5.5.2
Requiring organizations to balance operational simplicity, key-control requirements, data residency, and existing identity infrastructure. section 5.5.2

Regulated cloud lakehouse

A financial institution can use Amazon S3 or Google Cloud Storage with customer-managed keys, object-level access logging, and CloudTrail or GCP Audit Logs to support auditable Iceberg data access. section 5.5.2

How Architecting an Apache Iceberg Lakehouse covers it

Cover of Architecting an Apache Iceberg Lakehouse

liveBook manning.com

Read Architecting an Apache Iceberg Lakehouse on liveBook Get the book at manning.com

Related concepts

AESuses · AES is a standardized symmetric block cipher that encrypts and decrypts data in 128-bit blocks using 128-, 192-, or 256-bit keys.
Azure Storageused by · Azure Storage is Microsoft’s cloud storage platform, providing services for storing and accessing data such as blobs, files, queues, tables, and disks.
encryption at restimplements · Encryption at rest is the protection of stored data by encrypting it so it cannot be read without the appropriate cryptographic key.
API gatewayused by · An API gateway is an intermediary that provides an entry point for client requests to backend APIs or services and routes or otherwise mediates those requests.

This explainer was generated by Manning's knowledge graph from the text of Architecting an Apache Iceberg Lakehouse. The section links point to the parts of the book it draws on.