Data leakage prevention measures shall be applied to systems, networks and any other devices that process, store or transmit sensitive information
KubeAid and LinuxAid enforce strict access controls using Kubernetes RBAC and integrate SSO with strong MFA options such as YubiKey. Users and applications only access the data they are explicitly authorized to, reducing the risk of accidental or malicious data exposure.
Data at rest can be protected using encrypted storage backends such as SeaweedFS or through client-side encryption, which is the recommended approach. Alternatively, backups may be stored unencrypted in S3 while the backup server’s data disk is encrypted using LUKS, ensuring secure local storage. All communication between components is protected with TLS.
We can setup server-level controls that can limit `scp`, `rsync`based data transfers on servers.