Or a CloudHSM if you trust the certification: https://aws.amazon.com/cloudhsm/. - Source: Hacker News / over 1 year ago

Data at rest is precisely what it sounds like - static data persisted to storage. Other than securing access to your data with proper controls we have already mentioned, it may be necessary to encrypt it as well. You can choose to encrypt it before committing it to storage (Client Side Encryption) or you can let AWS help you, using S3 bucket encryption, AWS Key Management System (KMS) or if you're operating in a... - Source: dev.to / almost 2 years ago

And you're still commenting like you've never heard of HSM: Https://aws.amazon.com/cloudhsm/. Source: about 2 years ago

AWS KMS with a KMS custom key store key management backed by CloudHSM. - Source: dev.to / about 2 years ago

Have you considered something like CloudHSM? Source: over 2 years ago

The initial yes. Once encrypted you can trigger remote via intune/sccm/MDM https://docs.microsoft.com/en-us/windows/security/information-protection/bitlocker/bitlocker-overview. - Source: Hacker News / almost 2 years ago

On linux it you can achive it via LUKS, on windows with the help of bitlocker or preferably veracrypt. Source: about 2 years ago

What os are you using? If it happens to be a “pro” version of windows you could use bitlocker full-drive encryption which is built-in. There is one known vulnerability which involves gaining access to the RAM within seconds of shutdown, but that’s easily averted by keeping the computer in your possession for a minute or two after shutting it down. Source: about 2 years ago

There's additional info about bitlocker and tpm here. Source: about 2 years ago

There is also bitlocker drive encryption. That is one way to secure your data if you are worried someone can physically remove your drives. https://docs.microsoft.com/en-us/windows/security/information-protection/bitlocker/bitlocker-overview. Source: over 2 years ago