Can SSE be enabled for existing buckets
Applies to
- StorageGrid 12.0
- SSE (server-side encryption)
Answer
- Enabling SSE on a bucket only encrypts new objects written after SSE is enabled.
- Existing objects are NOT automatically encrypted when SSE is enabled on a bucket.
- To encrypt existing objects, each object must be overwritten (rewritten/copied to itself) after SSE is enabled.
Example:
aws s3 cp s3://bucket/object s3://bucket/object
