Skip to content

Commit ef50b82

Browse files
committed
docs(obj): update
1 parent 5c03bb1 commit ef50b82

File tree

1 file changed

+8
-1
lines changed

1 file changed

+8
-1
lines changed

pages/object-storage/how-to/host-healthcare-data.mdx

Lines changed: 8 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -24,6 +24,7 @@ This documentation provides the following elements:
2424

2525
- A Scaleway account logged into the [console](https://console.scaleway.com)
2626
- [Owner](/iam/concepts/#owner) status or [IAM permissions](/iam/concepts/#permission) allowing you to perform actions in the intended Organization
27+
- Signed an HDS contract with Scaleway for the garantees outlined in the [shared responsibility model]() to apply
2728

2829
## How to create a compliant bucket
2930

@@ -47,6 +48,8 @@ Even though you can use an existing bucket to host healthcare data, we strongly
4748

4849
9. Click **Create bucket** to confirm.
4950

51+
10. If you use a [customer-side encryption mechanism](#customer-side-encryption), enable bucket encryption using the [PutBucketEncryption]() action.
52+
5053
Your bucket is now ready to store healthcare data. Before uploading objects, refer to the sections below for information on how to encrypt and delete your objects in compliance with regulations.
5154

5255
## Prohibited actions on a compliant Bucket
@@ -57,6 +60,8 @@ to host healthcare data, you must comply to the following requirements:
5760

5861
- You must not use [lifecycle rules](/object-storage/concepts/#lifecycle-configuration) in your compliant bucket.
5962

63+
- If you use a [customer-side encryption mechanism](#customer-side-encryption), you must no delete the bucket encryption.
64+
6065
<Message type="important">
6166
Failure to comply with these requirements may lead to voiding compliance on the objects contained in the bucket.
6267
</Message>
@@ -79,7 +84,9 @@ Customer-side encryption ensures that sensitive data is protected before reachin
7984

8085
## How to delete objects
8186

82-
Objects must be deleted following in a compliant way to make sure data cannot be retrieved afterward. The deletion method varies according to the encryption method.
87+
Objects must be deleted in a compliant way to make sure data can not be retrieved by any means immediately afterward. When using the HDS-compliant method (using the `PutBucketEncryption` action), Scaleway encrypts your uploaded objects with a dedicated key that will be instantly deleted upon receiving a deletion request for the targeted objects.
88+
89+
This mechanism guarantees your objects can not be immediately retrieved, even if it takes additionnal time to process the delete of all the remaining chunks of your deleted objects.
8390

8491
### Deleting objects encrypted with SSE-C
8592

0 commit comments

Comments
 (0)