When using OBS to upload data with server-side encryption, you can select SEE-KMS encryption and use the key provided by KMS to encrypt the files to be uploaded, as shown in Figure 1. For details, see Object Storage Service Console Operation Guide.
Figure 1 Encrypting data in OBS

There are two types of CMKs that can be used:
- The default key obs/default created by KMS
- Custom keys that you created on the KMS console
Alternatively, you can call OBS APIs to upload a file with server-side encryption using KMS-managed keys (SSE-KMS). For details, see Object Storage Service API Reference.

Encrypting Data in OBS