From f536237cd41c10fccb8455815ecc95d6b167a55f Mon Sep 17 00:00:00 2001 From: Ray Offiah Date: Fri, 6 Feb 2026 09:51:55 +0000 Subject: [PATCH] [DOC-13979]: Add a note to the `Encryption at Rest` page, stating that field-level encryption is available. Added notes, along with links to the SDKs. Signed-off-by: Ray Offiah --- modules/ROOT/pages/concept-encryption-at-rest.adoc | 13 +++++++++++++ 1 file changed, 13 insertions(+) diff --git a/modules/ROOT/pages/concept-encryption-at-rest.adoc b/modules/ROOT/pages/concept-encryption-at-rest.adoc index 730d504..6440fc7 100644 --- a/modules/ROOT/pages/concept-encryption-at-rest.adoc +++ b/modules/ROOT/pages/concept-encryption-at-rest.adoc @@ -17,6 +17,19 @@ Encryption at rest supports encrypting multiple types of data within your Couchb * *Logs* - Server log files (note: encrypting logs will break fluent-bit log streaming) * *Audit logs* - Security audit trail data +[NOTE] +.Field-Level Encryption in Applications +==== +Applications can use the SDK to encrypt specific fields. +Depending on your application's requirements, field-level encryption may be more appropriate than encrypting the entire bucket. +See the SDK documentation for your development language for more information. +For example: + +* Go SDK: xref:go-sdk:howtos:encrypting-using-sdk.adoc[] +* Java SDK: xref:java-sdk:howtos:encrypting-using-sdk.adoc[] +* Python SDK: xref:python-sdk:howtos:encrypting-using-sdk.adoc[] +==== + == Key Types Couchbase offers flexibility in how encryption keys are managed through three different key types: