On this page

Show all

Help Center/ Object Storage Service/ FAQs/ Server-Side Encryption/ Why Cannot an Authorized Account or User Upload or Download KMS Encrypted Objects?

Why Cannot an Authorized Account or User Upload or Download KMS Encrypted Objects?

Updated on 2023-10-26 GMT+08:00

View PDF

Before using the server-side encryption of OBS, ensure that the OBS OperateAccess and KMS-related permissions have been granted to the account or user on IAM. If the current account or user is the grantee, it also requires the OBS OperateAccess permission. Contact your delegating party for authorization. For details, see Account Delegation.

CAUTION:

To access OBS, you need to obtain a temporary access key pair and a security token using an agency.
DEW is not a global service and KMS is a sub-service of it, so the KMS Administrator permission must be configured for the region where the bucket is located.
The agency information is stored on IAM. The configuration takes effect approximately 15 minutes after the configuration is complete.

Parent topic: Server-Side Encryption

Feedback

Was this page helpful?

Helpful Not helpful

Provide feedback

Thank you very much for your feedback. We will continue working to improve the documentation.

The system is busy. Please try again later.

Which of the following issues have you encountered?

Content is inconsistent with the product UI

Unclear descriptions

Lack of examples or code

Incorrect steps

Can't find what I need

Lack of best practices

Feedback (optional)

0/500

Select at least one type of issue, and enter your comments or suggestions.

Enter a maximum of 500 characters.

Submit Cancel