Tetap teratur dengan koleksi
Simpan dan kategorikan konten berdasarkan preferensi Anda.
Halaman ini memberikan informasi tentang cara data Anda dilindungi saat data berpindah
antara situs Anda dan penyedia cloud atau antara dua layanan dalam konteks
AML AI.
Layanan Google internal, termasuk yang digunakan oleh AI AML,
umumnya menggunakan ALTS.
Konsep ALTS mirip dengan mTLS, tetapi telah dioptimalkan untuk lingkungan pusat data Google. Dalam beberapa kasus, TLS digunakan.
Komunikasi eksternal ke financialservices.googleapis.com (endpoint AML AI) menggunakan TLS ke Google Front End (GFE). GFE
memastikan bahwa semua koneksi TLS dihentikan dengan sertifikat yang benar dan
bahwa semua praktik terbaik diikuti. Traffic antara GFE dan financialservices.googleapis.com
adalah internal dan dienkripsi dengan ALTS.
Traffic dari VM di Google Cloud ke GFE dienkripsi dengan TLS. Secara default,
traffic ini menggunakan alamat IP eksternal, tetapi dapat menggunakan alamat IP internal menggunakan
Akses Google Pribadi.
mTLS dapat dikonfigurasi menggunakan BeyondCorp Enterprise. Karena
tingkat akses VPC-SC
harus dikonfigurasi, lihat dokumentasi tentang
VPC-SC di AML AI.
Endpoint khusus mTLS harus digunakan, financialservices.mtls.googleapis.com.
[[["Mudah dipahami","easyToUnderstand","thumb-up"],["Memecahkan masalah saya","solvedMyProblem","thumb-up"],["Lainnya","otherUp","thumb-up"]],[["Sulit dipahami","hardToUnderstand","thumb-down"],["Informasi atau kode contoh salah","incorrectInformationOrSampleCode","thumb-down"],["Informasi/contoh yang saya butuhkan tidak ada","missingTheInformationSamplesINeed","thumb-down"],["Masalah terjemahan","translationIssue","thumb-down"],["Lainnya","otherDown","thumb-down"]],["Terakhir diperbarui pada 2025-09-01 UTC."],[[["\u003cp\u003eAML AI data moving between your site and the cloud or between two services is protected through encryption.\u003c/p\u003e\n"],["\u003cp\u003eInternal Google services, including AML AI, primarily utilize ALTS encryption, which is similar to mTLS but tailored for Google's environment, and in some cases TLS is used.\u003c/p\u003e\n"],["\u003cp\u003eExternal communication to the AML AI endpoint uses TLS to the Google Front End (GFE), with ALTS employed for internal traffic between the GFE and financialservices.googleapis.com.\u003c/p\u003e\n"],["\u003cp\u003eTraffic from a Google Cloud VM to the GFE is encrypted with TLS and can use internal IP addresses via Private Google Access.\u003c/p\u003e\n"],["\u003cp\u003emTLS encryption can be enabled using BeyondCorp Enterprise, with a specific mTLS endpoint, \u003ccode\u003efinancialservices.mtls.googleapis.com\u003c/code\u003e, and a configured VPC-SC access level.\u003c/p\u003e\n"]]],[],null,["# Understand encryption in transit\n\nThis page provides information on how your data is protected while data moves\nbetween your site and the cloud provider or between two services in the context\nof AML AI.\n\n- Internal Google services, including those used by AML AI, generally use [ALTS](/docs/security/encryption-in-transit/application-layer-transport-security). ALTS is similar in concept to mTLS but has been optimized for Google's data center environments. In some cases, TLS is used.\n- External communications to financialservices.googleapis.com (the AML AI endpoint) uses TLS to the Google Front End (GFE). The GFE ensures that all TLS connections are terminated with correct certificates and that all best practices are followed. Traffic between the GFE and financialservices.googleapis.com is internal and is encrypted with ALTS.\n- Traffic from a VM on Google Cloud to the GFE is encrypted with TLS. By default, this traffic uses external IP addresses but can use internal IP addresses using [Private Google Access](/vpc/docs/private-google-access).\n- mTLS can be configured using [BeyondCorp Enterprise](/chrome-enterprise-premium/docs/securing-resources-with-certificate-based-access). Because a [VPC-SC access level](/chrome-enterprise-premium/docs/create-cba-access-levels) must be configured, see documentation on [VPC-SC in AML AI](/financial-services/anti-money-laundering/docs/vpc-service-controls). The mTLS specific endpoint must be used, financialservices.mtls.googleapis.com.\n\nFor more details, see [encryption in transit in Google Cloud](/docs/security/encryption-in-transit)."]]
