Skip to content

Commit 93e2897

Browse files
Update security.mdx (#18026)
* Update security.mdx Minor update to reflect key management * Update src/content/docs/reference-architecture/architectures/security.mdx --------- Co-authored-by: Claire W <[email protected]>
1 parent 0ebe370 commit 93e2897

File tree

1 file changed

+1
-1
lines changed
  • src/content/docs/reference-architecture/architectures

1 file changed

+1
-1
lines changed

src/content/docs/reference-architecture/architectures/security.mdx

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -74,7 +74,7 @@ A unique aspect of the network's security architecture is how we use anycast net
7474

7575
Server updates, such as access policies, rate limiting, and firewall rules, are performed by our [Quicksilver service](https://blog.cloudflare.com/introducing-quicksilver-configuration-distribution-at-internet-scale). Customer changes are reflected across the entire network in seconds, allowing customers to respond to changing business requirements and ensuring policies are quickly implemented globally.
7676

77-
Every level of the network conforms to strict hardened security controls. Processes running on the edge are designed with a need-to-know basis and run with least privilege. We make heavy use of hardware security modules (HSMs) and the keys maintained within them ensure only the right access is given at the right time. To ensure tight control over and detailed visibility of changes to the network, all infrastructure is managed via code ([IaC](https://en.wikipedia.org/wiki/Infrastructure_as_code)).
77+
Every level of the network conforms to strict hardened security controls. Processes running on the edge are designed with a need-to-know basis and run with least privilege. We have our own key management system to ensure keys are secured at rest and in transit and that the right access to keys is given at the right time. To ensure tight control over and detailed visibility of changes to the network, all infrastructure is managed via code ([IaC](https://en.wikipedia.org/wiki/Infrastructure_as_code)).
7878

7979
#### Servers
8080

0 commit comments

Comments
 (0)