Encryption at Rest
Encryption at rest protects data stored on disk, snapshots and backups by encoding it so it cannot be read without the proper keys. It is now a baseline security and compliance requirement for most sensitive workloads. The consensus is that encryption at rest is necessary but not sufficient on its own; secure key management, access control and monitoring are equally important for meaningful protection.
