Help Center/ Data Encryption Workshop/ Service Overview/ KMS/ Cloud Services with KMS Integrated/ Encrypting Data in OBS
Updated on 2024-05-30 GMT+08:00
View PDF
Share

Encrypting Data in OBS

  • When using Object Storage Service (OBS) to upload data with server-side encryption, you can select SEE-KMS encryption and use the key provided by KMS to encrypt the files to be uploaded. For details, see Figure 1. For details, see Object Storage Service Console Operation Guide.
    Figure 1 OBS server-side encryption

    There are two types of CMKs that can be used:

    • The default key obs/default created by KMS
    • Custom keys that you created on the KMS console
  • Alternatively, you can call OBS APIs to upload a file with server-side encryption using KMS-managed keys (SSE-KMS). For details, see the Object Storage Service API Reference.