Recipe OSS: How to crypt/decrypt buckets? (Alibaba Cloud)

OSS provides three server-side encryption methods for the bucket:

• None: disables server side encryption,
• OSS-Managed: OSS uses keys to encrypt objects and manages these keys; OSS uses master keys that are regularly rotated,
• KMS: uses a CMK key stored in KMS to encrypt and decrypt data; before using this encryption, you must enable KMS,

Only the AES-256 algorithm is supported.