Encrypting Data in OBS

When using Object Storage Service (OBS) to upload files with server-side encryption, you can select KMS encryption and use the key provided by KMS to encrypt the files to be uploaded. For details, see Figure 1. For more information, see Object Storage Service Console Operation Guide.
Figure 1 OBS server-side encryption

There are two types of CMKs that can be used:
- The default master key obs/default created by KMS
- CMKs that you create on the KMS console using KMS-generated key materials
Alternatively, you can call OBS APIs to upload a file with server-side encryption using KMS-managed keys (SSE-KMS). For details, see the Object Storage Service API Reference.