Skip to content

Commit

Permalink
Added tde_heap workflow
Browse files Browse the repository at this point in the history
  • Loading branch information
nastena1606 committed Nov 14, 2024
1 parent 77bf425 commit 86b24a8
Showing 1 changed file with 6 additions and 0 deletions.
6 changes: 6 additions & 0 deletions documentation/docs/table-access-method.md
Original file line number Diff line number Diff line change
Expand Up @@ -34,6 +34,12 @@ CREATE TABLE table_name (

The `tde_heap` is a custom table access method that comes with the `pg_tde` extension to provide data encryption. It is automatically created **only** for the databases where you [enabled the `pg_tde` extension](setup.md) and configured the key provider.

### How does it work?

The `tde_heap` access method works on top of the default heap access method and is a marker to point which tables require encryption. It uses the custom storage manager TDE SMGR, which becomes active only after you installed the `pg_tde` extension.

When a table requires encryption, every data block is encrypted before it is written to disk and decrypted after reading before it is sent to the PostgreSQL core and then to the client. The encryption is done at the storage manager level.


## Changing the default table access method

Expand Down

0 comments on commit 86b24a8

Please sign in to comment.