Protecting stored data by encrypting it while it sits on storage devices. Like keeping sensitive documents in a locked safe when they're not being used.
Healthcare organizations use encryption at rest to protect patient data stored in databases and backup files.
Encryption at rest is typically enabled on storage/database services, while these key-management services create, store, rotate, and control access to the encryption keys (often customer-managed keys) used to encrypt stored data across each cloud.