Skip to content

Commit 0d3fae7

Browse files
committed
fix(tutorial): doc review 2
1 parent e7a10d0 commit 0d3fae7

File tree

1 file changed

+8
-4
lines changed
  • tutorials/object-storage-sse-c-with-secret-manager

1 file changed

+8
-4
lines changed

tutorials/object-storage-sse-c-with-secret-manager/index.mdx

Lines changed: 8 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -16,7 +16,7 @@ dates:
1616
---
1717
import Requirements from '@macros/iam/requirements.mdx'
1818

19-
In this tutorial you will learn how to use the Secret manager to store the encryption key used with [SSE-C](/object-storage/api-cli/enable-sse-c/).
19+
In this tutorial you will learn how to use Key Manager and Secret Manager to generate and store an encryption key used with [SSE-C](/object-storage/api-cli/enable-sse-c/) to encrypt and decrypt objects stored in a Scaleway Object Storage bucket.
2020

2121
<Requirements />
2222

@@ -27,7 +27,7 @@ In this tutorial you will learn how to use the Secret manager to store the encry
2727

2828
The goal here is to use Key Manager to generate the encryption key, store the encryption key in Secret Manager, then use it to encrypt Object Storage objects SSE-C.
2929

30-
### Generating the encryption key
30+
## Generating the encryption key
3131

3232
Run the following commands to create a key in Key Manager, generate the encryption key, then store it in Secret Manager.
3333

@@ -38,9 +38,9 @@ SECRET_ID=$(scw secret secret create name=ssec-key path=/keys -o template="{{.ID
3838
scw secret version create "$SECRET_ID" data="@ssec.key"
3939
```
4040

41-
### Encryption key and digest preparation
41+
## Preparing the encryption key and its digest
4242

43-
Run the following command to access the secret version to get the encryption key, encode it to base64, calculate the digest of the key (also encoded in base64), and store the outputs in environment variables.
43+
Run the following command to access the secret version to get the encryption key, encode it to base64, calculate the MD5 digest of the key (also encoded in base64), and store the outputs in environment variables.
4444

4545
```bash
4646
scw secret version access "$SECRET_ID" revision=latest raw=true > ssec.key
@@ -77,3 +77,7 @@ If you delete the secret containing the encryption key, you also lose the data e
7777
--sse-customer-key $ENCRYPTION_KEY \
7878
--sse-customer-key-md5 $KEY_DIGEST
7979
```
80+
81+
You can now use Key Manager and Secret Manager to safely create and store an encryption key to secure your Object Storage deployment with SSE-C.
82+
83+
Refer to the [dedicated documentation](/object-storage/api-cli/enable-sse-c/) for more information on how to use SSE-C for Scaleway Object Storage.

0 commit comments

Comments
 (0)