利用原生加密和 EBS 快照大规模保护块存储.pdf

1、 2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.STG325Pranav KabraNasan TsengegProtecting block storage at scale with native encryption and EBS Sn

2、apshots(he/him)Senior Product Manager TechnicalAmazon Web Services(he/him)Senior Product Manager TechnicalAmazon Web Services 2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.AgendaEBS Encryption&How It WorksEncryption By DefaultEBS Snapshots&Data Lifecycle ManagerCustom&Default Po

3、liciesQ/A 2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.140 TRILLION 140 TRILLION input/output operations processed daily500 MILLION 500 MILLION EBS volumes are created every day17 EXABYTES17 EXABYTESof data is transferred by EBS for customers dailyOVER OVER Amazon EBS Scale 202

4、5,Amazon Web Services,Inc.or its affiliates.All rights reserved.2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.EBS Encryption 2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.2025,Amazon Web Serv

5、ices,Inc.or its affiliates.All rights reserved.“Dance like no ones watching,encrypt like everyone is”Dr.Werner VogelsAmazon CTO 2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.Encrypted EBS volume implies:Data at rest inside the volumeData moving between the volume and instanceSna

6、pshots created from the volumesAmazon EC2 instanceAmazon EBS volumeAvailability ZoneEBS Volume Encryption 2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.Snapshots of encrypted volumes are automatically encrypted Volumes created from encrypted snapshots are automatically encrypted