We had need for short-term (several hours) EC2 compute nodes with sensitive data from customers. They'd boot up and encrypt all the drives using a random key without persisting it anywhere. Even so much as rebooting them made any data unusable. YMMV =) I'm thinking one could set the key using a start-up file so reboot would be possible.
Comments
Yay LUKS/dm-crypt kernel level disc encryption.
We had need for short-term (several hours) EC2 compute nodes with sensitive data from customers. They'd boot up and encrypt all the drives using a random key without persisting it anywhere. Even so much as rebooting them made any data unusable. YMMV =) I'm thinking one could set the key using a start-up file so reboot would be possible.