Security & Compliance

Enterprise security and compliance, with authentication, authorization, audit logging, and event handling out of the box.

Secure by Default

Zero-Trust: Applies least privilege across users, services, and buckets.
Defense in depth: Layered controls across access, encryption, and audit logging.
Out of the box: Protection is available without extra configuration.

Define clear access boundaries for users, services, applications, and automated agents without relying on long-lived shared credentials.

Model least-privilege permissions across users, groups, roles, buckets, and operational workflows.

Issue token-based temporary credentials to reduce long-term secret exposure and simplify controlled delegation.

Protect object data at rest and keep key ownership aligned with enterprise security requirements.

Use server-side encryption modes including SSE-S3, SSE-KMS, and SSE-C for workload-specific protection.

Centralize key lifecycle, access control, and auditability through enterprise-grade key management systems.

Turn storage activity into reviewable operational evidence for incident response and compliance processes.

Detect destructive actions and protect critical data.

Forward audit trails to Kafka and Pulsar for deeper security analytics.

Integrate RustFS into enterprise identity systems without turning login and operator access into custom glue code.

Integrate seamlessly with enterprise identity providers to enable frictionless single sign-on.

Set up OIDC from the web console and reduce operational complexity.

Protect service-to-service traffic with mutual identity verification and certificate automation.

Enforce mutual TLS so both sides authenticate on each connection.

Support cert-manager natively to automate certificate issuance and rotation.

Share your topology, identity model, and operations constraints with the RustFS team.