Arx
Inspiration¶
The term Arx is a Latin word meaning Citadel that relates to a fort or a castle providing defence for a place. In the digital world, an arx acts as a castle for the defence of privacy.
Before you start¶
If you are familiar with allocating cloud computing resources for your company, you will be familiar with the concept of creating and assigning an arx to support your expected workload. With the Onqlave platform, we follow a similar approach to allow you to optimise for speed and availability.
Review the provided roles and associated permissions¶
Our current release includes 3 defined roles: Platform Owner, Platform Admin and Developer. Each role has its own set of permissions and supported operations. You may need to first skim through the documentation on roles and supported operations before proceeding.
Create an Arx¶
Who can perform this operation?
There are several configurable attributes of an Arx that are grouped into 4 sections:
- Planning
- Cloud Provider
- Region
- Encryption mechanism
We will go through all of these 4 configurable sections during the creation process of an Arx.
1. Choose your plan¶
We support you in segregating the development, testing, staging and production by providing a single purpose arx for each desired environment, including: development, testing, staging, and production.
2. Select a provider¶
The choice of cloud provider determines which service is used to store your information. This allows for you to choose a cloud provider that your organisation already uses. At present we only support Google, but more providers are coming soon.
3. Select your preferred region¶
The choice of region allows you to determine within which geography you would like the data to reside. This may be an important factor for data localisation / data residency requirements for sensitive data, whilst there can also be additional [speed and efficiency] benefits from having the data reside in the same geography as the rest of your information.
4. Select your encryption primitive¶
We only offer encryption services based on the highest performance encryption algorithms. You have the choice of AES-GCM-128, AES-GCM-256 or XCHACHA20-POLY1305 with the latter offering stronger encryption but at a lower processing speed.
The key rotation frequency determines how regularly the encryption keys are changed. More regular rotations increase the level of security to ensure that your information remains safe.
5. Review Ownership¶
Before choosing the owner, make sure that you have skimmed through the supported access in this release.
Once you have completed all of your selections, you can review a summary of the choices before actually creating the Arx.
View a list of Arx¶
Who can perform this operation?
The overview of Arx will provide basic information about the total number of Arx as well as their status.
Update an Arx¶
Who can perform this operation?
There are two elements that you can change for any of your Arx:
- Arx's name (in the planning section)
- The key rotation period (in the encryption section)
Disable an Arx¶
Who can perform this operation?
This feature allows you to temporarily disable an Arx while maintaining the ability to enable it in the future without having to reconfigure everything from scratch.
The disabling process will require confirmation, including typing the exact name of the Arx before proceeding to the next step.
If the disabling process is successful, you can see the status of the selected Arx will have updated.
Delete an Arx¶
Who can perform this operation?
To completely delete an Arx, you have to go through the same process as disabling...
... which also includes typing the exact name of the Arx.
If successful, the number of remaining Arx will be updated instantly in the Arx dashboard.
Not satisfied yet?¶
If you have specific requirements, or would like to discuss our development plans in more details, please feel free to reach out to product@onqlave.com or you can directly send us a feedback via the integrated feedback button on the lower right corner of the Arx dashboard.