Enable Server-Side Encryption with the CLI

You can enable server-side encryption (SSE) on your Backblaze B2 Cloud Storage buckets using the command-line interface (CLI).

For information about how to enable SSE using the Native API, click here.

Upload SSE-B2-Enabled Files

Even without the setting turned on at the bucket level, you can enable it on individual file uploads by using the appropriate header information.

aws s3 cp /path/to/myfile s3://mybucket/myfile --sse AES256 \
    --endpoint-url <S3 endpoint>

Upload SSE-C-Enabled Files

Use this command to upload files that are SSE-C-enabled.

aws s3 cp /path/to/myfile s3://mybucket/myfile --sse-c AES256 \
  --sse-c-key <AES256 KEY> --endpoint-url <S3 endpoint>

Copy SSE-C-Enabled Files Between Buckets

There are a few options to specify when you use the b2_copy_file API to copy files or parts between buckets.