5d382b60c3
* Add concept about Grafana database encryption.
* Add database encryption information for Enterprise.
(cherry picked from commit 59b0f534c5)
Co-authored-by: Ursula Kallio <73951760+osg-grafana@users.noreply.github.com>
16 lines
801 B
Markdown
16 lines
801 B
Markdown
+++
|
||
title = "Database encryption"
|
||
description = "Grafana database encryption"
|
||
keywords = ["grafana", "database", "encryption", "documentation"]
|
||
aliases = [""]
|
||
weight = 450
|
||
+++
|
||
|
||
# Grafana database encryption
|
||
|
||
Grafana’s database contains secrets, which are used to query data sources, send alert notifications and perform other functions within Grafana.
|
||
|
||
Grafana encrypts these secrets before they are written to the database, by using a symmetric-key encryption algorithm called Advanced Encryption Standard (AES), and using a [secret key]({{< relref "../administration/configuration/#secret_key" >}}) that you can change when you configure a new Grafana instance.
|
||
|
||
You can also use envelope encryption, which complements a KMS integration by adding a layer of indirection to the encryption process.
|