Object Storage Supports Bucket Level Encryption

Bucket level encryption can now be enabled for buckets in Object Storage.

For more information, see Updating an Object Storage Bucket to Use an SSE-KMS Bucket Key.

When using customer managed Vault (KMS) keys, Object Storage data can now be encrypted at the bucket level. Bucket level encryption uses a bucket-scoped intermediate encryption key protected by the customer's KMS key. We recommend enabling the Bucket Key encryption setting when using a customer managed Vault (SSE-KMS) key for encryption to reduce calls from Object Storage to KMS, which lowers PUT and GET latency, and decreases the likelihood of KMS throttling.