Recipe OSS: How to crypt/decrypt buckets? (Alibaba Cloud)

OSS provides three server-side encryption methods for the bucket:

  • None: disables server side encryption,
  • OSS-Managed: OSS uses keys to encrypt objects and manages these keys; OSS uses master keys that are regularly rotated,
  • KMS: uses a CMK key stored in KMS to encrypt and decrypt data; before using this encryption, you must enable KMS,

Only the AES-256 algorithm is supported.

--

--

Get the Medium app

A button that says 'Download on the App Store', and if clicked it will lead you to the iOS App store
A button that says 'Get it on, Google Play', and if clicked it will lead you to the Google Play store