en-decrypt

Pattern

One string per logical secret

You are billed per encrypt, not per field inside the string.

Do: JSON.stringify({ ssn, dob, accountNumber }) then one POST /v1/encrypt. Store the envelope in one column.

Avoid: one encrypt per field. That is three billed operations and three strings.

PUT /v1/encrypt with the stored value is free. DELETE unused values to leave inventory.