Help Center> Object Storage Service> SDK Reference> Go> Bucket-Related APIs> Configuring Bucket Encryption
View PDF

Configuring Bucket Encryption

API Description

You can use this API to configure encryption for a bucket so that objects can be encrypted using the corresponding method before being uploaded to a bucket. Server-side encryption with keys hosted by KMS (SSE-KMS) is currently available.

Method Definition

func (obsClient ObsClient) SetBucketEncryption(input *SetBucketEncryptionInput) (output *BaseModel, err error)

Method Definition If a Signed URL Is Used

func (obsClient ObsClient) SetBucketEncryptionWithSignedURL(signedURL string, actualSignedRequestHeaders http.Header, data io.Reader) (output *BaseModel, err error)

Request Parameters

Field

Type

Optional or Mandatory

input

*SetBucketEncryptionInput

Mandatory

Returned Result

Field

Type

output

*BaseModel

err

error

Sample Code

var obsClient, _ = obs.New(ak, sk, endpoint, obs.WithSignature(obs.SignatureObs))

func main() {
       input := &obs.SetBucketEncryptionInput{}
       input.Bucket = "bucketname"
       // Specify the input encryption algorithm and the corresponding KMS key.
       input.SSEAlgorithm = "kms"
       input.KMSMasterKeyID = "your kms key id"
       output, err := obsClient.SetBucketEncryption(input)
       if err == nil {
              fmt.Printf("RequestId:%s\n", output.RequestId)
       } else {
              if obsError, ok := err.(obs.ObsError); ok {
                     fmt.Println(obsError.Code)
                     fmt.Println(obsError.Message)
              } else {
                     fmt.Println(err)
              }
       }
}
Parent topic: Bucket-Related APIs