1. A computer-implemented method for providing data storage services, comprising: under the control of one or more computer systems of a computing resource service provider, the one or more computer systems configured with executable instructions, receiving, from a customer of the computing resource service provider, a request to utilize a data storage service of the computing resource service provider; as a result of having received the request to utilize the data storage service, causing a cryptography service of the computing resource service provider to provide information encrypted by the cryptography service using a key that is inaccessible to the data storage service, the information usable to obtain the data object in unencrypted form and the key from a plurality of keys managed by the cryptography service on behalf of a plurality of customers of the computing resource service provider; and using the data storage service to store the encrypted information.