检测到您已登录华为云国际站账号,为了您更好的体验,建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
If server-side encryption is disabled for a bucket, the encrypted objects can only be accessed over HTTPS. A key in use cannot be deleted, or the object encrypted with this key cannot be downloaded.
Restrictions: The value is encrypted by MD5 and then encoded by Base64, for example, 4XvB3tbNTN+tIEVa0/fGaQ==.
Restrictions: The value is encrypted by MD5 and then encoded by Base64, for example, 4XvB3tbNTN+tIEVa0/fGaQ==.
Restrictions: The value is encrypted by MD5 and then encoded by Base64, for example, 4XvB3tbNTN+tIEVa0/fGaQ==.
Restrictions: The value is encrypted by MD5 and then encoded by Base64, for example, 4XvB3tbNTN+tIEVa0/fGaQ==.
An uploaded or copied object has a unique ETag after being encrypted using MD5. Restrictions: If an object is encrypted using server-side encryption, the ETag is not the MD5 value of the object. Value range: The value must contain 32 characters.
ACL permissions for encrypted objects cannot be granted to registered users or anonymous users. Click Export to get the object ACL configuration. The file includes the user type, account, object access, and ACL access. Click Add to apply specific ACL permissions to an account.
During HTTPS transmission, a hash function (for example, SHA-256) is used to create a message digest and this digest is then encrypted using a session key. This ensures that data is not tampered with or replaced during transmission.
Restrictions: The value is encrypted by MD5 and then encoded by Base64, for example, 4XvB3tbNTN+tIEVa0/fGaQ==.
Restrictions: The value is encrypted by MD5 and then encoded by Base64, for example, 4XvB3tbNTN+tIEVa0/fGaQ==.
An uploaded or copied object has a unique ETag after being encrypted using MD5. Restrictions: If an object is encrypted using server-side encryption, the ETag is not the MD5 value of the object. Value range: The value must contain 32 characters.
When SecureTransport is set to True, requests sent to OBS must be encrypted using Secure Sockets Layer (SSL). For details, see Bucket Policy Parameters.
An uploaded object or copied object has a unique ETag after being encrypted using MD5. Type: string x-obs-id-2 A special symbol that helps troubleshoot faults. Type: string Default value: none x-reserved-indicator A special symbol that helps troubleshoot faults.
Data Consistency Verification Server-side encryption With server-side encryption enabled, objects you upload to OBS will be encrypted into ciphertext before they are stored on the server.
Restrictions: The value is encrypted by MD5 and then encoded by Base64, for example, 4XvB3tbNTN+tIEVa0/fGaQ==.
e.printStackTrace(); } } } When you download an object encrypted with SSE-OBS or obtain the metadata of such an object, the object is automatically decrypted and no encryption-related headers are required.
AES256: The target object copy is encrypted using SSE-C and the AES-256 algorithm. - - AES256: The target object copy is encrypted using SSE-C and the AES-256 algorithm. - x-obs-copy-source-server-side-encryption-customer-key Specifies the Base64-encoded key for object copies when
SseCKey: 'your sse-c key generated by AES-256 algorithm' }; // Download the encrypted object. const result = await obsClient.getObject(params); if (result.CommonMsg.Status <= 300) { console.log("Get object(%s) under the bucket(%s) successful!"
For example: Precautions Encrypted objects remain encrypted when their storage class is transitioned. Minimum storage duration The minimum storage duration is the minimum billable storage duration.
If a custom key in a non-default IAM project is used to encrypt objects, only the key owner can upload or download the encrypted objects.