@@ -27,11 +27,12 @@ Configuring the ``DATABASES`` setting
2727=====================================
2828
2929In addition to :ref: `configuring-databases-setting `, you must also configure an
30- encrypted database in your `` DATABASES ` ` setting.
30+ encrypted database in your :setting: ` django: DATABASES ` setting.
3131
3232This database will be used to store encrypted fields in your models. The
3333following example shows how to configure an encrypted database using the
34- ``AutoEncryptionOpts `` from the ``pymongo.encryption_options `` module.
34+ :class: `pymongo.encryption_options.AutoEncryptionOpts ` from the
35+ :mod: `pymongo.encryption_options ` module.
3536
3637This example uses a local KMS provider and a key vault namespace for storing
3738encryption keys.
@@ -60,9 +61,10 @@ encryption keys.
6061 Configuring the ``DATABASE_ROUTERS `` setting
6162============================================
6263
63- Similar to :ref: `configuring-database-routers-setting ` for using embedded
64- models, to use Queryable Encryption, you must also configure the
65- ``DATABASE_ROUTERS `` setting to route queries to the encrypted database.
64+ Similar to :ref: `configuring-database-routers-setting ` for using :doc: `embedded
65+ models </topics/embedded-models>`, to use Queryable Encryption you must also
66+ configure the :setting: `django:DATABASE_ROUTERS ` setting to route queries to the
67+ encrypted database.
6668
6769This is done by adding a custom router that routes queries to the encrypted
6870database based on the model's metadata. The following example shows how to
@@ -94,3 +96,25 @@ configure a custom router for Queryable Encryption:
9496
9597 Configuring KMS Providers
9698=========================
99+
100+ To use Queryable Encryption, you must configure a Key Management Service (KMS)
101+ provider. The KMS provider is responsible for managing the encryption keys used
102+ to encrypt and decrypt data. The following table summarizes the available KMS
103+ provider options and how to configure them:
104+
105+ +-------------------------------------------------------------------------+---------------------------------------+
106+ | :setting: `KMS_CREDENTIALS <DATABASE-KMS-CREDENTIALS> ` | A dictionary of Key Management |
107+ | | Service (KMS) credentials |
108+ | | configured in the |
109+ | | :setting: `django:DATABASES ` |
110+ | | setting. |
111+ +-------------------------------------------------------------------------+---------------------------------------+
112+ | :class: `kms_providers <pymongo.encryption_options.AutoEncryptionOpts> ` | Map of KMS provider credentials and |
113+ | | options. The ``kms_providers `` map |
114+ | | values differ by provider and are |
115+ | | required to access KMS services. |
116+ +-------------------------------------------------------------------------+---------------------------------------+
117+ | ``kms_provider `` | A single KMS provider name |
118+ | | configured in your custom database |
119+ | | router. |
120+ +-------------------------------------------------------------------------+---------------------------------------+
0 commit comments