Set up BYOK with Cloud.ru KMS

1. In cloud.ru, go to user management.

‍

2. Go to Service accounts and click Create service account.

‍

3. Next, assign the role: Service user, and select sckm.user.

‍

4. In the Access keys section of the new user, click Create key.

‍

5. Set the key lifetime to any period you need. If the key doesn't have an unlimited lifetime, you'll need to replace it yourself when it expires.

‍

6. Copy the keyId and secret values you get.

7. In Pachca, enter them in JSON format:

{ "keyId": "1bf45****", "secret": "712d****" }

‍

8. Go to Key Management and click Create key.

‍

9. Create a symmetric key. Don't set a rotation period.

‍

10. Copy the ID of the new key and enter it in the KMS Key ID field in Pachca.

11. Click Enable encryption.

Advanced data encryption is now on for your Pachca workspace.

‍