anchor.diff:  
   1. Further configuration can be provided through the <code>fog_connection</code> hash, which is passed through to the Fog gem.
   
  -##<a id="fog-aws-sse"></a> Fog with AWS Server Side Encryption
  -
  -Amazon S3-Managed Encryption Keys (SSE-S3)
  -
  -Amazon S3 offers Server Side Encryption at rest. For more information on AWS encryption, see <a href="http://docs.aws.amazon.com/AmazonS3/latest/dev/UsingServerSideEncryption.html">here</a>.
  -To configure server side encryption in your cloud foundry deployment, update your manifest to include a `fog_aws_storage_options` with `encryption` set to `AES256`, as follows:
  +##<a id="fog-aws-sse"></a> Fog with AWS Server-Side Encryption
  +
  +AWS S3 offers Server-Side Encryption at rest. For more information, see <a href="http://docs.aws.amazon.com/AmazonS3/latest/dev/UsingServerSideEncryption.html">Protecting Data Using Server-Side Encryption with Amazon S3-Managed Encryption Keys (SSE-S3)</a>.
  +
  +To use Fog blobstores with AWS SSE-S3 encryption, perform the following steps:
  +
  +1. Insert the following configuration into your manifest under `properties.cc`:
   
   ```
   cc:
  
positive.code:     fog_connection: *fog_connection
      fog_aws_storage_options: *fog_aws_storage_options
  ```
  
  ##<a id="fog-aws-iam"></a> Fog with AWS IAM Instance Profiles
  
  
negative.code: 
  Cloud Controller has four types of objects that need to be stored in a blobstore: <code>buildpacks</code>, <code>droplets</code>, <code>packages</code>, and <code>resource_pool</code>. By default, the blobstore configuration uses the Fog Ruby gem, but can also use the WebDAV protocol.
  
  This document demonstrates four common blobstore configurations: 
  * [Fog with AWS Credentials](#fog-aws-creds)
  * [Fog with AWS Server Side Encryption](#fog-aws-sse)
  * [Fog with AWS IAM Instance Profiles](#fog-aws-iam)
  * [WebDAV](#webdav) internal blobstore
  
  ##<a id="fog-aws-creds"></a> Fog with AWS Credentials
  
  