Advanced Clusters

Back Next

Data encryption

Encryption protects the data that is used to process jobs. You can use encryption to protect data at rest, temporary data, and data in transit.

Encryption is available for the following types of data:

Data at rest: You can use the server-side encryption options on Amazon S3 to encrypt the following data at rest:

Staging data on Amazon S3
Log files on Amazon S3

For more information about encrypting staging data and log files, see Encrypt staging data and log files at rest (optional).

For information about encrypting source and target data, see the help for the appropriate connector in the
Data Integration
help.

If you configure an encryption-related custom property in an Amazon S3 V2 connection, the
Spark engine
uses the same custom property to read and write staging data.
Temporary data: Temporary data includes cache data and shuffle data that cluster nodes generate.

To encrypt temporary data, enable encryption in the
advanced configuration
. If you enable encryption, temporary data is encrypted using the HMAC-SHA1 algorithm by default. To use a different algorithm, contact Informatica Global Customer Support.
Data in transit: By default, data in transit to and from Amazon S3, including staging data and log files, is encrypted using the Transport Layer Security (TLS) protocol.