Cortex supports data encryption at rest for some storage backends. S3 The Cortex S3 client supports the following server-side encryption (SSE) modes: SSE-S3 SSE-KMS Blocks storage The blocks storage S3 server-side encryption can be configured as follows. s3_sse_config The s3_sse_config configures the S3 server-side encryption. sse:# Enable AWS Server Side Encryption. Supported values: SSE-KMS, SSE-S3.# CLI flag: -<prefix>.s3.sse.type[type:<string> | default = ""]# KMS Key ID used to encrypt o...