IBM Cloud supports two ways of providing your own key for encrypting your data at rest:
Key-Protect can provide your own key during bucket creation using Key Protect. You can manage the lifecycle of your keys in IBM Cloud. SSE-C can provide your own key for encryption. IBM Cloud does not save your key within IBM Cloud Object Storage. \r