Obtaining the Encryption Configuration of a Bucket

Function

You can use this command to obtain the encryption configuration of a bucket.

Constraints

To obtain the encryption configuration of a bucket, you must be the bucket owner or have the required permission (obs:bucket:GetEncryptionConfiguration granted using IAM or GetEncryptionConfiguration granted using a bucket policy). For details, see Differences Between OBS Permissions Control Methods, Using IAM Roles or Policies to Grant Access to OBS, and Creating a Custom Bucket Policy.

Command Line Structure

• Windows

  obsutil encryption obs://bucket -method=get [-config=xxx] [-e=xxx] [-i=xxx] [-k=xxx] [-t=xxx]

• macOS or Linux

  ./obsutil encryption obs://bucket -method=get [-config=xxx] [-e=xxx] [-i=xxx] [-k=xxx] [-t=xxx]

Examples

• In Windows, run obsutil encryption obs://test-bucket -method=get -localfile=d:\temp\encryption-output.json to export the encryption configuration file of bucket test-bucket to the local file encryption-output.json.

  obsutil encryption obs://test-bucket -method=get -localfile=d:\temp\encryption-output.json
  
  Start at 2024-09-30 07:59:28.8675681 +0000 UTC
  
  Get encryption configuration succeed for bucket [test-bucket], requestId is [00000199766AD0AB4015BC408DBE55EC]

Parameter Description

Helpful Links

• For details about the API for obtaining the encryption configuration of a bucket, see Obtaining the Encryption Configuration of a Bucket.
• For details about the meanings, causes, and handling methods of error codes that may be returned during the operation, see OBS Error Codes.
• For the security-related FAQ, see OBS Security FAQ