LAB 29 (Encrypt Object Storage with custom managed keys)

Encrypt Object Storage with custom managed keys

Steps to Encrypt Object Storage with custom managed keys

1. Go to storage and click on bucket under the Object Storage & Archive Storage. Afer click on "Test_Bucket"

2. Click on Assign key Button and select the Vault and select master encryption key and click on Assign key

we can't assign key due to permission error.

Now first we create a policy and grant permission for key assign.

We Add this Policy

allow service objectstorage-us-ashburn-1 to use keys in compartment Hub_Compute_and_storage_compartment

Now we retry to assign custom manage key into the object storage

We successfully assigned key to the object storage