Encrypting Data in OBS¶
When using Object Storage Service (OBS) to upload files with server-side encryption, you can select KMS encryption and use the key provided by KMS to encrypt the files to be uploaded. For more information about OBS, see the Object Storage Service User Guide.
There are two types of CMKs that can be used:
The default master key obs/default created by KMS
CMKs that you create on the KMS console using KMS-generated key materials
Alternatively, you can call OBS APIs to upload a file with server-side encryption using KMS-managed keys (SSE-KMS). For details, see the Object Storage Service API Reference.