LAB 31 ‐ Encrypt Object Storage with Custom managed Keys

Replace oracle managed keys with vault(custom) keys

we will encrypt Object Storage(bucket) oracle managed keys with our vault keys that we have already created.

1. Open your bucket details page and click on the option Assign next to Encryption key

2. Select created vault & vault key and click on assign

It's clear that we currently lack the necessary permissions to change keys in the volume.

Therefore, our first step should be to create a policy that grants the required permissions.

we got the below error because we don't have permission so click on cancel and create the policy first then assign the keys.

Next we add this policy

allow service objectstorage-us-ashburn-1 to use keys in compartment Hub_compute_and_storage_compartment

I fogot to add the region identifier with the keyword object storage so editing the policy

Now we will try again to assign vault key in bucket

Finally, vault key has assigned to bucket