When using Object Storage Service (OBS) to upload data with server-side encryption, you can select KMS encryption and use the key provided by KMS to encrypt the files to be uploaded. For details, see Figure 1. For more information, see Object Storage Service User Guide.Figure 1 OBS server-side encryption
There are two types of CMKs that can be used:
- The default key obs/default created by KMS
- Custom keys that you created on the KMS console