Question
Accenture
IN
Last activity: 1 Feb 2024 1:10 EST
ABAC property Encryption
We are trying to implement ABAC on a few existing properties using property encrypt whereby Key will be saved in AWS KMS.
We have a few tables in the system which are commonly used by the application as well as external technologies (ETL/AWS Glue) for both read and write operations.
- If an external system is writing into a common table (unencrypted value), and application assign the value to one of the encrypted properties, will the value be encrypted once viewed from clipboard/tracer/logs?
- Is there any way that the external technology can implement the decrypt function from Pega while reading from the db during processing data from the table/generating reports.
***Edited by Moderator Rupashree to add Capability tags***
Pegasystems Inc.
US
i recently configured data encryption in 8.8.2 and found that the property value appears encrypted in the Pega log, Tracer, and DB table. It was entirely hidden in the clipboard. I documented my finding in this article. https://support.pega.com/discussion/encrypt-data-using-attribute-based-access-control-abac. Hope you find some of these information relevant.
Maantic Inc
IN
1. Ideally if you have defined an ABAC policy of type property encrypt, then that property should get automatically encrypted and saved in the DB even if the request is coming from an external source.
2. How is the external source is integrating with Pega?. Assuming that it is a REST API, you can explicitly use the function decryptPW to decrypt the data and then post the response.