Object Encryption

This is supported for buckets located in the US and APAC (ap-southeast-1). On EU buckets the SSE-C headers are silently ignored: the object is stored unencrypted and can be retrieved without the key.

We support SSE-C. Here is an example on how to PutObject with encryption.

PutObject with SSE-C

Don’t forget to update --sse-customer-key here.

user@host ~ % aws s3api put-object --body /path/to/file.png --bucket mybestbucket --key objenc --sse-customer-algorithm AES256 --sse-customer-key XXX
{
    "ETag": "\"18830c2cf6204ca111864bf967c40959\"",
    "SSECustomerAlgorithm": "AES256",
    "SSECustomerKeyMD5": "YYY"
}

Presigned URLs

Making Bucket Public

⌘I

Overview

Get Started

Concepts

Access via S3 API

Access from Edge Compute

Features

Compatibility & Migration

Platform

API Reference (S3-Compatible)

API Reference (JSON Companion)

For AI Agents

Object Encryption

PutObject with SSE-C

​PutObject with SSE-C

PutObject with SSE-C