encrypted-saved-objects

Encrypt sensitive data in Kibana Saved Objects by registering specific attributes like credentials as encrypted. This ensures secrets are protected at rest and prevents unauthorized access if the database is compromised.

AAD binding secures encrypted Saved Objects by using Additional Authenticated Data to ensure data integrity. This mechanism prevents unauthorized tampering by tightly coupling the encrypted payload with its specific object context.

Encrypted Saved Objects fully support Serverless Kibana deployments. The framework is designed to handle specific Serverless constraints, ensuring data confidentiality during zero-downtime upgrades and secure cross-environment operations.

Handle schema migrations for encrypted data by utilizing the framework's built-in model versioning. This manages schema changes securely across different versions, maintaining data integrity without exposing raw sensitive attributes during the transition.

Store API keys securely within Kibana by registering them as Encrypted Saved Objects. This approach encrypts the sensitive attributes directly, ensuring that credentials and tokens remain protected even if the underlying database is breached.

Encryption for PII in Kibana Saved Objects is needed to ensure data security at rest. By encrypting sensitive attributes, you prevent unauthorized access and data leakage, maintaining strict confidentiality for credentials and personal information.