Object Storage

Object Storage now supports the aws:SecureTransport policy condition key, allowing you to enforce the use of TLS for all requests made to your buckets and objects. This enables you to deny any unencrypted (HTTP) access and ensure that data is always transmitted securely.

Simply add a bucket policy using the aws:SecureTransport condition to restrict access to requests made over HTTPS.

Refer to our dedicated documentation for more information.

SSE-KMS provides server-side encryption (SSE) of your objects using encryption keys managed through Scaleway's Key Management Service (KMS), giving you full control over your encryption keys while benefiting from a fully managed experience, keeping both data and encryption keys under European jurisdiction.

Simply enable SSE-KMS at bucket creation, or from the settings of an existing bucket, and select the KMS key to use for encryption. All objects uploaded after activating SSE-KMS will then be encrypted transparently using the configured key.

Refer to our dedicated documentation for more information.

Conditional writes improve data consistency by allowing applications to create or update objects only when specific conditions are met, helping prevent accidental overwrites in concurrent environments.

Terraform state locking enables safe collaboration by preventing simultaneous updates to the same remote state file when using Scaleway Object Storage as a Terraform backend.

Refer to our dedicated documentation page to check supported conditional operations.