You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: pages/object-storage/how-to/host-healthcare-data.mdx
+10-10Lines changed: 10 additions & 10 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -24,7 +24,7 @@ This documentation provides the following elements:
24
24
25
25
- A Scaleway account logged into the [console](https://console.scaleway.com)
26
26
-[Owner](/iam/concepts/#owner) status or [IAM permissions](/iam/concepts/#permission) allowing you to perform actions in the intended Organization
27
-
- Signed an HDS contract with Scaleway for the garantees outlined in the [shared responsibility model](/object-storage/reference-content/storage-shared-responsibility-model/) to apply
27
+
- Signed an HDS contract with Scaleway for the guarantees outlined in the [shared responsibility model](/object-storage/reference-content/storage-shared-responsibility-model/) to apply
28
28
29
29
## How to create a compliant bucket
30
30
@@ -54,13 +54,13 @@ Your bucket is now ready to store healthcare data. Before uploading objects, ref
54
54
55
55
## Prohibited actions on a compliant Bucket
56
56
57
-
to host healthcare data, you must comply to the following requirements:
57
+
to host healthcare data, you must comply with the following requirements:
58
58
59
59
- You must not use the [Glacier](/object-storage/concepts/#storage-classes) storage class. Refer to the [Shared responsibility model](/object-storage/reference-content/storage-shared-responsibility-model/) for more information on this requirement.
60
60
61
61
- You must not use [lifecycle rules](/object-storage/concepts/#lifecycle-configuration) in your compliant bucket.
62
62
63
-
- If you use a [customer-side encryption mechanism](#customer-side-encryption), you must no delete the bucket encryption.
63
+
- If you use a [customer-side encryption mechanism](#customer-side-encryption), you must not delete the bucket encryption.
64
64
65
65
<Messagetype="important">
66
66
Failure to comply with these requirements may lead to voiding compliance on the objects contained in the bucket.
@@ -72,27 +72,27 @@ Objects in a compliant bucket must be encrypted to make sure data is protected.
72
72
73
73
### Encryption with SSE-C
74
74
75
-
Scaleway's SSE-C (**S**erver-**S**ide **E**ncryption with **C**ustomer-provided keys) mechanism garantees that objects uploaded to the bucket are properly encrypted.
75
+
Scaleway's SSE-C (**S**erver-**S**ide **E**ncryption with **C**ustomer-provided keys) mechanism guarantees that objects uploaded to the bucket are properly encrypted.
76
76
77
-
You can check that your objects are propery encrypted by performing a simple `HeadObject` operation on an encrypted object. Scaleway Object Storage will return a `400` error if SSE-C has been used to upload this object.
77
+
You can check that your objects are properly encrypted by performing a simple `HeadObject` operation on an encrypted object. Scaleway Object Storage will return a `400` error if SSE-C has been used to upload this object.
78
78
79
79
Refer to the [dedicated documentation](/object-storage/api-cli/enable-sse-c/) for comprehensive information on how to encrypt objects using SSE-C.
80
80
81
81
### Customer-side encryption
82
82
83
-
Customer-side encryption ensures that sensitive data is protected before reaching Scaleway Object Storage, giving you control on the encryption mechanism, and keys managemnent. This method must be used in combination with [Scaleway's HDS-compliant deletion method](#deleting-objects-with-customer-side-encryption).
83
+
Customer-side encryption ensures that sensitive data is protected before reaching Scaleway Object Storage, giving you control over the encryption mechanism, and keys management. This method must be used in combination with [Scaleway's HDS-compliant deletion method](#deleting-objects-with-customer-side-encryption).
84
84
85
85
## How to delete objects
86
86
87
-
Objects must be deleted in a compliant way to make sure data can not be retrieved by any means immediately afterward. When using the HDS-compliant method (using the `PutBucketEncryption` action), Scaleway encrypts your uploaded objects with a dedicated key that will be instantly deleted upon receiving a deletion request for the targeted objects.
87
+
Objects must be deleted in a compliant way to make sure data cannot be retrieved by any means immediately afterward. When using the HDS-compliant method (using the `PutBucketEncryption` action), Scaleway encrypts your uploaded objects with a dedicated key that will be instantly deleted upon receiving a deletion request for the targeted objects.
88
88
89
-
This mechanism guarantees your objects can not be immediately retrieved, even if it takes additionnal time to process the delete of all the remaining chunks of your deleted objects.
89
+
This mechanism guarantees your objects cannot be immediately retrieved, even if it takes additional time to process the delete of all the remaining chunks of your deleted objects.
90
90
91
91
### Deleting objects encrypted with SSE-C
92
92
93
-
If you use Scaleway's SSE-C to encrypt your data, using [DeleteObject](/object-storage/api-cli/object-operations/#deleteobject) is sufficient to garantee that your object is deleted in compliance with the regulatory requirements.
93
+
If you use Scaleway's SSE-C to encrypt your data, using [DeleteObject](/object-storage/api-cli/object-operations/#deleteobject) is sufficient to guarantee that your object is deleted in compliance with the regulatory requirements.
94
94
95
-
### Deleting objects with customer-side encrpytion
95
+
### Deleting objects with customer-side encryption
96
96
97
97
If you do not use Scaleway's SSE-C to encrypt your data, you must use Scaleway's HDS-compliant method to delete objects. You must enable bucket encryption beforehand, using the `PutBucketEncryption` operation.
0 commit comments