forked from docs/doc-exports
zhangyue
78cb06737e
Reviewed-by: Sabelnikov, Dmitriy <dmitriy.sabelnikov@t-systems.com> Co-authored-by: zhangyue <zhangyue164@huawei.com> Co-committed-by: zhangyue <zhangyue164@huawei.com>
19 lines
3.3 KiB
HTML
19 lines
3.3 KiB
HTML
<a name="obs_03_0088"></a><a name="obs_03_0088"></a>
|
|
|
|
<h1 class="topictitle1">Bucket Default Encryption</h1>
|
|
<div id="body1551323631371"><p id="obs_03_0088__p725032142814">OBS allows you to configure default encryption for a bucket. After the configuration, objects uploaded to this bucket are automatically encrypted using the specified KMS key, making data storage more secure.</p>
|
|
<p id="obs_03_0088__p855995918245">You can enable default encryption when creating a bucket (see <a href="en-us_topic_0045853662.html">Creating a Bucket</a>), or enable or disable default encryption after a bucket is created.</p>
|
|
<p id="obs_03_0088__p4926171015014">OBS encrypts only the objects uploaded after the default encryption is enabled, and does not encrypt those uploaded before. After default encryption is disabled, the encryption status of existing objects keeps unchanged, and you can still manually encrypt objects upon upload.</p>
|
|
<div class="section" id="obs_03_0088__section3892114117330"><h4 class="sectiontitle">Enabling Default Encryption for a Bucket</h4><ol id="obs_03_0088__ol93829311363"><li id="obs_03_0088__li99821455306"><span>In the bucket list, click the bucket you want to operate. The <strong id="obs_03_0088__obs_03_0307_b1395123914108">Overview</strong> page of the bucket is displayed.</span></li><li id="obs_03_0088__li18830181855820"><span>In the right <strong id="obs_03_0088__b26567116474">Basic Configurations</strong> area, click <strong id="obs_03_0088__b188978911477">Default Encryption</strong>. The <strong id="obs_03_0088__b87694251478">Default Encryption</strong> dialog box is displayed.</span></li><li id="obs_03_0088__li185861427134716"><span>Select <strong id="obs_03_0088__b158241243144713">Enable</strong>.</span><p><p id="obs_03_0088__p181834121475">Key <strong id="obs_03_0088__b2020880818">obs/default</strong> is selected by default for KMS encryption. You can also click <strong id="obs_03_0088__b42672114811">Create KMS Key</strong> to switch to the management console of KMS and create customer master keys. Then back to OBS Console and select the key from the drop-down list box for KMS encryption.</p>
|
|
</p></li><li id="obs_03_0088__li950544814498"><span>Click <strong id="obs_03_0088__b74262294910">OK</strong>.</span></li></ol>
|
|
</div>
|
|
<div class="section" id="obs_03_0088__section1434134116310"><h4 class="sectiontitle">Disabling Default Encryption for a Bucket</h4><ol id="obs_03_0088__ol03353441319"><li id="obs_03_0088__li1933611448318"><span>In the bucket list, click the bucket you want to operate. The <strong id="obs_03_0088__obs_03_0307_b1395123914108_1">Overview</strong> page of the bucket is displayed.</span></li><li id="obs_03_0088__li11336244153118"><span>In the right <strong id="obs_03_0088__b1365043122112">Basic Configurations</strong> area, click <strong id="obs_03_0088__b5651153142118">Default Encryption</strong>. The <strong id="obs_03_0088__b26513319217">Default Encryption</strong> dialog box is displayed.</span></li><li id="obs_03_0088__li18336114433120"><span>Select <strong id="obs_03_0088__b711113614154">Disable</strong>.</span></li><li id="obs_03_0088__li93366443315"><span>Click <strong id="obs_03_0088__b1632457202">OK</strong>.</span></li></ol>
|
|
</div>
|
|
</div>
|
|
<div>
|
|
<div class="familylinks">
|
|
<div class="parentlink"><strong>Parent topic:</strong> <a href="obs_03_0321.html">Server-Side Encryption</a></div>
|
|
</div>
|
|
</div>
|
|
|