Prevent read encrypted data from S3 API

Product Discussions
1
  1. I login to Storj
  2. I create a bucket
  3. I create S3 credentials
  4. allow write to bucket
  5. use access + secret key to PutObject

My question is after step 5 is it possible for the root account to ever get the encrypted contents of the object I put into the bucket without using the access + secret key?

I understand and it is obvious that you should not be able to get the decrypted contents of the object without the keys but I want to know is the object protected from even fetch the encrypted contents without the access + secret keys?

2

No, to see the object the correct encryption key is needed. In fact, the opposite is also true — a single bucket can contain objects encrypted with different keys; only those that decrypt with each key will be visible.

1 Like
3

Thanks!

Marking your reply as solution / answer

1 Like