AwsS3BucketServerSideEncryptionArgs

interface AwsS3BucketServerSideEncryptionArgs {
bucketKeyEnabled?: Input<boolean>;
kmsKey?: AwsKmsKeyInput;
sseAlgorithm: Input<'AES256' | 'aws:kms'>;
}

Server-side encryption settings for bucket defaults.

Example

CODE

const encryption: AwsS3BucketServerSideEncryptionArgs = {
  sseAlgorithm: 'aws:kms',
  kmsKey,
  bucketKeyEnabled: true,
};

Properties

`bucketKeyEnabled: Input<boolean>`

Optional S3 Bucket Key enablement.

`kmsKey: AwsKmsKeyInput`

Optional customer-managed KMS key for aws:kms.

`sseAlgorithm: Input<'AES256' | 'aws:kms'>`

Default server-side encryption algorithm.