Advanced Clusters

Back Next

Data encryption

Encryption protects the data that is used to process jobs. You can use encryption to protect data at rest, temporary data, and data in transit.

Encryption is available for the following types of data:

Data at rest: By default, Google Cloud Storage encrypts staging data and log files. For more information, refer to the Google Cloud documentation.
For information about encrypting source and target data, see the help for the appropriate connector in the
Data Integration
help.
Temporary data: Temporary data includes cache data and shuffle data that the Spark engine generates on cluster nodes.
To encrypt temporary data, enable encryption in the
advanced configuration
. If you enable encryption, temporary data is encrypted using the HMAC-SHA1 algorithm by default. To use a different algorithm, contact Informatica Global Customer Support.
Data in transit: By default, Google Cloud Storage uses the Transport Layer Security (TLS) protocol to encrypt data in transit to and from Google Cloud Storage, including staging data and log files.