vpruthi/doc-exports
1
0
Fork 0
forked from docs/doc-exports
Code Pull Requests Activity
doc-exports/docs/obs/umn/obs_03_0088.html
zhangyue 92e44874e7 OBS UMN DOC 
Reviewed-by: Sabelnikov, Dmitriy <dmitriy.sabelnikov@t-systems.com>
Co-authored-by: zhangyue <zhangyue164@huawei.com>
Co-committed-by: zhangyue <zhangyue164@huawei.com>
2024-11-06 14:33:05 +00:00

3.8 KiB
Raw Permalink Blame History

Bucket Server-Side Encryption

You can configure server-side encryption for an OBS bucket. Once configured, any objects you upload to the bucket will be encrypted with the specified KMS key by default.

You can enable server-side encryption when creating a bucket (see Creating a Bucket). You can also enable or disable server-side encryption for an existing bucket.

OBS only encrypts the objects uploaded after server-side encryption is enabled for the bucket, and does not encrypt those uploaded before. After server-side encryption is disabled, encryption status of existing objects in the bucket remains unchanged, and you can still encrypt objects when you upload them.

Enabling Server-Side Encryption for a Bucket

  1. In the bucket list, click the bucket you want to operate. The Overview page is displayed.
  2. In the Basic Configurations area, click Server-Side Encryption. The Server-Side Encryption dialog box is displayed.
  3. Select Enable.

    Key obs/default is selected by default for KMS encryption. You can also click Create KMS Key to switch to the KMS management console and create a customer master key. Then go back to OBS Console and select the key from the drop-down list.

  4. Click OK.

Disabling Server-Side Encryption for a Bucket

  1. In the bucket list, click the bucket you want to operate. The Overview page is displayed.
  2. In the Basic Configurations area, click Server-Side Encryption. The Server-Side Encryption dialog box is displayed.
  3. Select Disable.
  4. Click OK.
Parent topic: Server-Side Encryption