Skip to main content

Encryption

In Transit​

All data transfers use TLS 1.2+:

security:
  tls:
    min_version: "1.2"
    cipher_suites:
      - TLS_AES_256_GCM_SHA384
      - TLS_CHACHA20_POLY1305_SHA256
`

## At Rest

```yaml
security:
  encryption:
    at_rest: true
    key_management: aws-kms  # or: azure-keyvault, gcp-kms
    key_rotation_days: 90
`

## See Also

- [IAM Overview](/docs/iam/overview)
- [Audit Logs](/docs/iam/audit-logs)