docs: document S3 SSE-KMS support and deprecate SSE-C - #15375
Conversation
Add documentation for the SSE-KMS (AWS Key Management Service) server-side encryption support introduced in Nextcloud 34 (nextcloud/server#57623). Mark SSE-C as deprecated, noting the AWS policy change that disabled SSE-C by default on new S3 buckets in April 2026 and recommending SSE-KMS for new deployments. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> Signed-off-by: Stephen Cuppett <steve@cuppett.com>
|
Hello there, We hope that the review process is going smooth and is helpful for you. We want to ensure your pull request is reviewed to your satisfaction. If you have a moment, our community management team would very much appreciate your feedback on your experience with this PR review process. Your feedback is valuable to us as we continuously strive to improve our community developer experience. Please take a moment to complete our short survey by clicking on the following link: https://cloud.nextcloud.com/apps/forms/s/i9Ago4EQRZ7TWxjfmeEpPkf6 Thank you for contributing to Nextcloud and we hope to hear from you soon! (If you believe you should not receive this message, you can add yourself to the blocklist.) |
Add documentation for the SSE-KMS (AWS Key Management Service) server-side encryption
support introduced in Nextcloud 34 (nextcloud/server#57623). Mark SSE-C as deprecated,
noting the AWS policy change that disabled SSE-C by default on new S3 buckets in April
2026 and recommending SSE-KMS for new deployments.
Changes:
primary_storage.rst— addssse_kms_enabledandsse_kms_key_idto the S3optional parameters list; marks the SSE-C section
.. deprecated:: 34with a.. warning::about the AWS policy change; adds a new "S3 SSE-KMS encryption support"section (
.. versionadded:: 34) with two configuration examples (specific KMS key ARNand bucket-default key); also fixes the SSE-C code example (replaces
array()syntaxwith
[]and switches the bare::blocks to.. code-block:: php/bash)config_sample_php_parameters.rst— addssse_kms_enabled,sse_kms_key_id, andsse_c_keywith descriptive inline comments to the S3 objectstore sample blockencryption_configuration.rst— expands the SSE note to cross-reference both SSE-KMS(recommended) and the deprecated SSE-C sections via
:ref:and:doc:links☑️ Resolves
🖼️ Screenshots
✅ Checklist
codespellor similar and addressed any spelling issues