The goal of encrypted cloud storage is to create a virtual private storage system that maintains confidentiality and data integrity. Encryption should separate stored data (data at rest) from data in transit. Depending upon the particular cloud provider, such as Microsoft allows up to five security accounts per client, and can use these different accounts to create different zones. On Amazon Web Service, we can create multiple keys and rotate those keys during different sessions.