Terraform resource: aws s3 bucket server side encryption configuration

• https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/s3_bucket_server_side_encryption_configuration

aws_s3_bucket_server_side_encryption_configuration

Resource not supported with S3 directory buckets.

Official usage

resource "aws_kms_key" "mykey" {
  description             = "This key is used to encrypt bucket objects"
  deletion_window_in_days = 10
}

resource "aws_s3_bucket" "mybucket" {
  bucket = "mybucket"
}

resource "aws_s3_bucket_server_side_encryption_configuration" "example" {
  bucket = aws_s3_bucket.mybucket.id

  rule {
    apply_server_side_encryption_by_default {
      kms_master_key_id = aws_kms_key.mykey.arn
      sse_algorithm     = "aws:kms"
    }
  }
}

Related

• aws_s3_bucket
• remote_state, encrypt =
• SSE
• Encryption
• Directory buckets
• aws_s3_bucket_logging
• Coguard: terraform_aws_s3_bucket_encryption_resource_always_associated

See also

• Terraform S3 resources: aws_s3_bucket, aws_s3_object, aws_s3_bucket_policy, aws_s3_bucket_acl, aws_s3_bucket_website_configuration, aws_s3_bucket cors_configuration, aws_s3_account_public_access_block, Terraform module: s3-bucket, aws_s3_bucket_versioning, aws_s3_bucket_server_side_encryption_configuration, aws_s3_bucket_logging, aws_s3_bucket_cors_configuration