selective-encrypted-storage-pattern - Field-level encryption for sensitive data at rest
Encrypt specific sensitive data fields before storage to prevent data at rest leakage
Tags
Updated: 2026-03-20Capabilities
Typical Inputs
Typical Outputs
What this skill does
- encrypt data fields
- decrypt data fields
- store encrypted data
- retrieve encrypted data
- manage keys
- rotate keys
Inputs
- plaintext sensitive data
- encryption keys
- cipher configuration
- key identification info
Outputs
- encrypted data
- decrypted data
Requirements
- Key Management Service or HSM
- AES-256-GCM encryption algorithm
- separate key storage from data