Conceptual
Login

Encryption at Rest

Encrypting stored data so a stolen disk or snapshot is unreadable without the key; it protects against storage-layer compromise but not against any principal authorized to read through the service, which is why access control still matters.