Set up CMK-enabled Atlassian apps
CMK gives greater control over encryption keys to protect your Atlassian Cloud data. Currently you can create only one CMK encryption (policy) per Atlassian Cloud organization for all data in scope for new sites only. Atlassian Cloud customers not using BYOK can enroll in CMK. BYOK customers will eventually be migrated to CMK.
How to set up CMK-enabled Atlassian apps
Before you can set up CMK-enabled Atlassian apps, you need to:
Who can do this? |
When you add an Atlassian app, you have the choice of using an Atlassian managed key or a Customer managed key, giving you greater control over encryption keys.
For Atlassian Isolated Cloud customers, CMK is mandatory and built in. See Set up your AWS account and create a KMS key policy for details.
To set up a CMK-enabled Atlassian app:
移動 アトラシアンの管理。組織が複数ある場合は、対象の組織を選択します。
Select Apps, then Atlassian apps.
Select Add app to display the Atlassian apps available.
From the list, find the Atlassian Enterprise app you wish to add, and select Add app.
Select whether you’d like to use a new or an existing site, then enter (or select) its URL.
[次へ] を選択します。
From the Encryption dropdown, select Customer managed key.
On an Atlassian Isolated Cloud instance, CMK is automatically selected and cannot be changed.追加 を選択します 。
Provisioning of your Atlassian app will now begin.
To view encrypted sites:
移動 アトラシアンの管理。組織が複数ある場合は、対象の組織を選択します。
Select Security, then Data protection, then Encryption.
If you’re using a CMK policy, select the Apps tab on the Encryption page to see the list of encrypted sites.
Note: If you’re using a BYOK policy, you’ll see all encrypted sites on the Encryption page itself.
この内容はお役に立ちましたか?