From 092b89c59e56e6f118f6e691b1c3e1d6923e78d7 Mon Sep 17 00:00:00 2001 From: Sheen Capadngan Date: Tue, 17 Jun 2025 20:28:28 +0800 Subject: [PATCH] misc: corrected kms section --- docs/self-hosting/guides/production-hardening.mdx | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/self-hosting/guides/production-hardening.mdx b/docs/self-hosting/guides/production-hardening.mdx index 1ec08a0a4..dfd7b575f 100644 --- a/docs/self-hosting/guides/production-hardening.mdx +++ b/docs/self-hosting/guides/production-hardening.mdx @@ -642,7 +642,7 @@ Infisical can integrate with external KMS providers to encrypt project secrets, - **Supported Providers**: AWS KMS, Google Cloud KMS, Azure Key Vault (coming soon) - **Workspace Key Protection**: Each project's encryption key is protected by your external KMS -- **Zero Trust**: Infisical never stores your KMS keys - all encryption/decryption operations happen via your cloud KMS +- **Envelope Encryption**: Infisical uses your cloud KMS to encrypt/decrypt project workspace keys, which in turn encrypt the actual secret data - **Compliance**: Leverage your cloud provider's compliance certifications (FedRAMP, SOC2, ISO 27001) #### Benefits for Production Deployments