# How to take a snapshot using SSE-C

**URL:** <https://discuss.elastic.co/t/how-to-take-a-snapshot-using-sse-c/324773>\
**Category:** Elasticsearch\
**Tags:** snapshot-and-restore\
**Created:** [February 6, 2023, 8:39am UTC](https://discuss.elastic.co/t/how-to-take-a-snapshot-using-sse-c/324773 "2023-02-06T08:39:19Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![kannan\_raj](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/kannan_raj/32/63201_2.png) [@kannan\_raj](https://discuss.elastic.co/u/kannan_raj)\
**Post date:** [February 6, 2023, 8:39am UTC](https://discuss.elastic.co/t/how-to-take-a-snapshot-using-sse-c/324773/1 "2023-02-06T08:39:19Z")

</div>

Hi All,

we are using Elasticsearch version 7.16.

I can encrypt the snapshot using SSE-S3(SSE managed by AWS) by adding the configuration **"server-side-encryption: true"** in the s3 snapshot repository.

```auto
PUT _snapshot/my_s3_repository
{
  "type": "s3",
  "settings": {
    "bucket": "my-bucket",
    "server_side_encryption": True
  }
}

```

We have to implement SSE-C (Server Side encryption - Customer-provided encryption) instead of SSE-S3.

Does S3 repository plugin support Server Side encryption - Customer-provided encryption method?

could you please let me know if there is any way to encrypt the data using SSE-C encryption using a snapshot repository or any other way to achieve this?

**Server-side encryption with Amazon S3 managed keys (SSE-S3)**

> **[Using server-side encryption with Amazon S3-managed encryption keys (SSE-S3)...](https://docs.aws.amazon.com/AmazonS3/latest/userguide/UsingServerSideEncryption.html)**
>
> With server-side encryption, Amazon S3 manages encryption and decryption for you.

**Server-side encryption with customer-provided keys (SSE-C)**

> **[Using server-side encryption with customer-provided keys (SSE-C) - Amazon...](https://docs.aws.amazon.com/AmazonS3/latest/userguide/ServerSideEncryptionCustomerKeys.html)**
>
> To use your own custom keys to encrypt the objects that you store on Amazon S3, use server-side encryption with customer-provided encryption keys (SSE-C).

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [March 6, 2023, 8:39am UTC](https://discuss.elastic.co/t/how-to-take-a-snapshot-using-sse-c/324773/2 "2023-03-06T08:39:41Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.