HomeDocsInstallationMCPSDKDemoCommunityBlog
Security & Compliance

Data Encryption

Find the verified RustFS server-side encryption and key management references.

RustFS provides server-side encryption options for data stored in the object storage service. Use this section to choose the key-management model that matches your security requirements.

Encryption options

  • SSE-S3 covers server-managed server-side encryption with the S3 AES256 mode.
  • SSE-C covers server-side encryption with customer-provided keys.
  • SSE-KMS covers Local, Vault KV2, and Vault Transit key-management backends.

For the currently verified KMS configuration surface, see the CLI reference and environment variable reference.

Access Keys

Previous Page

SSE-S3

Configure server-managed SSE-S3 encryption for RustFS buckets and object writes.

On this page

Encryption options