If the server is behind a vpn anyway, wouldn't it be secure?

I'm looking at aws's encryption at rest feature, and trying to understand why I would use it. If someone manages to get through my vpn, wouldn't they be able to access the encrypted data using the same key?

  • It's a defence-in-depth measure. Maybe they somehow have your data without also having the access that would give them the key. Maybe they have an errant page of memory that was once part of the instance storage from your EC2 instance, for example. Maybe somebody has kicked down the doors at the data centre and they've run off with the hard drives. Generally you want to protect against the attack vectors that you haven't yet imagined. – struthersneil Aug 2 '17 at 21:40

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.