How are the EZKs (Encryption Zones) protected within the Ranger Database

[#1]

How are the EZKs (Encryption Zones) protected within the Ranger DB? Are they in encrypted fields or in the clear? How do we ensure that only Ranger KMS can access them? What accounts have access by default? Is network access locked down? Where is the password stored

[#2 · Accepted solution]

@Vishal Gupta

You might want to refer to the detailed step by step guide on "Create Encryption Zone" In Lab6 https://github.com/HortonworksUniversity/Security_Labs#lab-6a