检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
Default value: None sseCKey byte[] Yes Explanation: Key used for encrypting the object when SSE-C is used, in byte[] format. Default value: None sseCKeyBase64 String No Explanation: Base64-encoded key used for encrypting the object when SSE-C is used.
Default value: None sseCKey byte[] Yes Explanation: Key used for encrypting the object when SSE-C is used, in byte[] format. Default value: None sseCKeyBase64 String No Explanation: Base64-encoded key used for encrypting the object when SSE-C is used.
Example: "expiry-date=\"Mon, 11 Sep 2023 00:00:00 GMT\"" Default value: None sseKms str Explanation: SSE-KMS is used for encrypting objects on the server side.
For details about the example code, see ISV Server Encrypting the Username and Password After Resource Enabling. ip No String 64 IP address of the website. memo No String 1,024 Remarks. For details about how to obtain accessKey, see Obtaining the Key.
This relieves servers from decrypting or encrypting data. SSL encryption/decryption is performed on backend servers, compromising server performance.
Value range: 40 GB to 2048 GB cmk_id No String Specifies a custom key used for encrypting an image. For its value, see the Key Management Service User Guide. tags No Array of strings Lists the image tags. This parameter is left blank by default.
Exporting an Image Encrypting images You can create encrypted images to improve data security. KMS envelope encryption is used. Encrypted images can be created from external image files or encrypted ECSs.
For details, see Encrypting Images. Constraints If you use a full-ECS image to create an ECS, the EVS disks associated with the full-ECS image do not support the function of creating disks from a data disk image.
Figure 2 Encrypting environment variables Function public access configuration Public access: By default, a function can access the public network. All tenants share the bandwidth, which may cause external network attacks.
For details, see Encrypting Data over SSL for a GeminiDB Influx Instance. For details about how to disable SSL, see Encrypting Data over SSL for a GeminiDB Influx Instance. Table 6 Tags Parameter Description Tags The setting is optional.
Default value: None sseCKey byte[] Yes Explanation: Key used for encrypting the object when SSE-C is used, in byte[] format. Default value: None sseCKeyBase64 String No Explanation: Base64-encoded key used for encrypting the object when SSE-C is used.
Table 7 SseKmsHeader Parameter Type Mandatory (Yes/No) Description encryption ServerEncryption Yes Explanation: SSE-KMS used for encrypting objects. Explanation: SSE-KMS is used for encrypting objects on the server side. Value range: kms. For details, see Table 9.
Default value: None sseKms str Explanation: SSE-KMS is used for encrypting objects on the server side.
Preparations Before encrypting data in OBS, register a Huawei Cloud account and enable Huawei Cloud services. For details, see Signing Up for a HUAWEI ID and Enabling Huawei Cloud Services. If you have enabled Huawei Cloud, skip this step.
Certificate Source: source of a certificate for encrypting and authenticating HTTPS data transmission. If you select a TLS key, you must create a key certificate of the IngressTLS or kubernetes.io/tls type beforehand. For details, see Creating a Secret.
Figure 3 Custom encryption Download a full backup and use the third-party full backup tool Percona XtraBackup to restore the backup locally. prepare phase: --transition-key = {custom_key} copy-back phase: --transition-key={custom_key} --generate-new-master-key Encrypting or Decrypting
Default value: None sseCKey byte[] Yes Explanation: Key used for encrypting the object when SSE-C is used, in byte[] format. Default value: None sseCKeyBase64 String No Explanation: Base64-encoded key used for encrypting the object when SSE-C is used.
Default value: None sseCKey byte[] Yes Explanation: Key used for encrypting the object when SSE-C is used, in byte[] format. Default value: None sseCKeyBase64 String No Explanation: Base64-encoded key used for encrypting the object when SSE-C is used.
Default value: None sseCKey byte[] Yes Explanation: Key used for encrypting the object when SSE-C is used, in byte[] format. Default value: None sseCKeyBase64 String No Explanation: Base64-encoded key used for encrypting the object when SSE-C is used.
Default value: None sseCKey byte[] Yes Explanation: Key used for encrypting the object when SSE-C is used, in byte[] format. Default value: None sseCKeyBase64 String No Explanation: Base64-encoded key used for encrypting the object when SSE-C is used.
