search

ibm-cloud-docs / cloud-object-storage

cloud-object-storage
15 stars 46 forks source link

No Key Required to Access Key Protected Bucket #75

Closed thevicross closed 4 years ago

thevicross commented 5 years ago

I am using the API to create buckets with Key Protect encryption. However, when I have items in such a bucket, I do not need the Key Protect key to access it and see it unencrypted. Is this normal? I would expect to need to use the key to decrypt the objects in a bucket. Thanks.

nglange commented 5 years ago

Great question. Yes, it's totally normal. What's happening is that when you send the request to COS to access an object, the system will check to see if you have access to the KP Root Key that is associated with the bucket. If you do, then COS will grab the key and decrypt the data for you.

nglange commented 4 years ago

Closing this, but if it remains a problem just comment and I can reopen it.