ApsaraDB for MongoDB supports Key Management Service (KMS) encryption.
You can enable Transparent Data Encryption (TDE) in the ApsaraDB for MongoDB console to encrypt and decrypt I/O flow for data files in real time. This way, data is encrypted before being written to disks and decrypted before being read from disks to memory. For more information, see Configure TDE.