Storage

This section allows you to manage the root disk configuration of your server.

The YaK sets default values for your root disk (encryption, size, disk type, deletion policy).

However these values can be changed:

• by editing the values in the form directly

• by loading a root disk storage template by clicking the "Load Template" button (a root disk template must have been defined first, see section "Templates").

Encryption settings If your organization is subject to corporate or regulatory policies that require encryption of data, we recommend that you create an encrypted file system.

YaK supports the following encryption methods for each cloud provider:

• AWS (at-rest): Creates an encrypted file system that encrypts all of your data and metadata at rest using an AES-256 encryption algorithm.

• OCI (in-transit): Enables or disables in-transit encryption between the instance and its volumes.

• Azure (at host): Data stored on the VM host is encrypted at rest and flows are encrypted to the storage service. Azure disk encryption parameter must be enabled at subscription level from your Azure account otherwise, the server cannot be encrypted.