Data Protection

OBS takes different measures to keep data stored in OBS secure and reliable.

**Table 1** Data protection measures
Measure	Description	Reference
Transmission encryption (HTTPS)	OBS supports HTTP and HTTPS, but HTTPS is recommended for security reasons.	Constructing a Request
Data redundancy	OBS ensures data redundancy by using the Erasure Code (EC) algorithm, instead of multiple copies. EC delivers a higher storage utilization than multi-copy redundancy while maintaining the same reliability level. When creating a bucket on OBS, you can choose a data redundancy policy. Choosing the multi-AZ storage will make your data redundantly stored in multiple AZs in the same region. If one AZ becomes unavailable, data can still be properly accessed from the other AZs. The multi-AZ storage is ideal for scenarios that demand high reliability.	Creating a Bucket
Data integrity verification (MD5)	During object uploads or downloads, data may become inconsistent due to network hijacking, caching, and other reasons. OBS verifies data consistency by calculating the MD5 value when data is uploaded or downloaded.	Data Consistency Verification
Server-side encryption	With server-side encryption enabled, objects you upload to OBS will be encrypted into ciphertext before they are stored on the server. When objects are downloaded, they will be decrypted on the server first and then returned in plaintext to you.	Server-Side Encryption
Cross-region replication	You can configure cross-region replication rules to automatically, asynchronously replicate data from a source bucket to a destination bucket in another region. This enables disaster recovery across regions, meeting your needs for remote backup.	Cross-Region Replication
Versioning	When versioning is enabled for a bucket, OBS can keep multiple versions of an object in the bucket. That way you can quickly retrieve and restore every object version as needed, or recover data from both accidental actions and application failures.	Versioning
Critical operation protection	You can enable critical operation protection on OBS Console. With critical operation protection enabled, OBS verifies user identity before allowing any critical operation like deleting a bucket. This enhances the security of your data and configuration.	Critical Operation Protection