Temporal Proxy centralizes workflow encryption
Temporal’s October 26 Product Edition spotlights Temporal Proxy, a gateway that encrypts sensitive workflow payloads with customer-managed keys before they reach Temporal Cloud. It keeps application workers on a local endpoint while handling upstream TLS, authentication, and namespace routing.
Temporal is turning encryption from an application-by-application burden into deployable infrastructure, a compelling fit for teams running sensitive workflows and AI agents.
- –Envelope encryption supports AWS KMS, Azure Key Vault, and GCP KMS, with namespace-level overrides.
- –Workers can remain unaware of Temporal Cloud credentials while the proxy adds TLS, API authentication, and namespace translation.
- –CLI and Web UI access through the codec server improves operability, but an unauthenticated endpoint would effectively become a decryption oracle.
- –The proxy reduces custom Data Converter work without eliminating key rotation, access-control, and deployment responsibilities.
DISCOVERED
1h ago
2026-10-27
PUBLISHED
1h ago
2026-10-27
RELEVANCE
AUTHOR
temporalio