Resource Orchestration Service (ROS) protects your data throughout its lifecycle by encrypting data in transit and at rest, helping prevent unauthorized access, tampering, and loss.
Transmission confidentiality
ROS supports HTTPS for encrypted transmission and provides 256-bit encryption keys to protect sensitive information in transit.
HTTPS encrypts data during transmission by using Transport Layer Security (TLS) and SSL, which prevents data from being monitored, intercepted, or tampered with by third parties.
Storage confidentiality
ROS encrypts stack parameters for which NoEcho is set to true and the sensitive property values of specific resources. For example, ROS encrypts the value of the AccessKeySecret output of ALIYUN::RAM::AccessKey. You are responsible for encrypting confidential or sensitive information in templates. We strongly recommend that you do not directly write such information to templates and instead use a secure method, such as encrypted parameters, to store it. For more information, see Encrypted parameters.