mc encrypt update
The mc encrypt update command re-encrypts existing objects in place under the bucket’s current encryption configuration.
Syntax
The command has the following syntax:
mc encrypt update [FLAGS] TARGET
Flags
| Flag | Description |
|---|---|
--kms-key value |
KMS key name or ARN for SSE-KMS encryption. |
--use-bucket-key |
Use S3 Bucket Key for SSE-KMS. |
--version-id value, --vid value |
Update encryption for a specific object version (default: latest). |
Global flags
This command supports any of the global flags.
Examples
Update object encryption to SSE-KMS with key “my-minio-key”.
mc encrypt update --kms-key my-minio-key myminio/mybucket/myobject
Update encryption with Bucket Key enabled.
mc encrypt update --use-bucket-key --kms-key my-minio-key myminio/mybucket/myobject
Update encryption for a specific object version.
mc encrypt update --kms-key my-minio-key --version-id "3Jr2x6fqlBUsVzbvPihBO3HgNpgZgAnp" myminio/mybucket/myobject
Behavior
S3 compatibility
The mc command-line tool is built for compatibility with the AWS S3 API and is tested with MinIO AIStor and AWS S3 for expected functionality and behavior.