What is bucket encryption?

You can activate the encryption feature per bucket. Once activated, encryption is applied to newly uploaded objects in the bucket.

3DS OUTSCALE provides a default main cryptographic key (MCK) for your account that is used to generate a data key per object. The MCK material is renewed every year to comply with strong governance policies. In a later version, you will be able to manage your own MCKs and their authorizations.

Bucket encryption is a complementary feature to what is already in place in the OUTSCALE environment and yours. It provides a stronger layer of security of your data using envelope encryption.

This feature is optional but recommended. In the future 3DS OUTSCALE aims to apply it by default. For more information, see Introduction to OOS.