Yandex Lockbox

2023: Product Announcement

Yandex has launched a service for storing corporate secrets Yandex Lockbox. The Russian company announced this on April 10, 2023.

According to the developers, with the help of Yandex Lockbox, companies can strengthen the security of the cloud infrastructure and simplify information security (information security) audits. In Yandex Lockbox, confidential information for working with access in the cloud is encrypted and controlled by the provider's information security service. The service is already available on the platform website, and the cost of storing one version of the secret will be 18 rubles. per month.

As noted in Yandex, secrets are confidential information for working with accesses in the cloud, for example, a database password or server certificate keys. Yandex Lockbox provides fault tolerance and secure secret storage. They are stored in encrypted form, and are also replicated in three availability zones. At the same time, the client company will not have to additionally select configurations or independently support Yandex Lockbox.

Yandex Lockbox is already integrated with several cloud platform services. It can be used, for example, when working with Kubernetes clusters or serverless calculations. In addition, Lockbox secrets can be encrypted on the Key management service (KMS) key. It is worth considering that the KMS service now supports the ability to encrypt using the hardware security module (HSM), a specialized computing device for protecting cryptographic keys. This opportunity is especially important for financial institutions, as it allows you to comply with the requirements of the Central Bank of the Russian Federation and the PCI DSS payment card data security standard.

By providing Yandex Lockbox, we solve an important cloud security challenge - protecting passwords and any other secrets. This will help companies from different industries improve the security of access to sensitive data and meet generally accepted standards, "said Grigory Atrepyev, Product Director of Yandex Cloud.