SOS now supports encryption at rest with SSE-SOS (using AES-256 encryption). When enabled, SSE-SOS offers free, automatic and fully managed encryption of all new objects written to your bucket. Combined with encryption in transit (TLS), your data is protected end-to-end without the need to manage keys on your side.