# BucketEncryption

What kind of server-side encryption to apply to this bucket.

- Source: [`aws-s3/lib/bucket.ts`](https://github.com/aws/aws-cdk/blob/v2.273.0/packages/aws-cdk-lib/aws-s3/lib/bucket.ts#L3418)
- Type last changed: v2.84.0 · 14 Jun 2023

## Example

```ts
declare const application: appconfig.Application;

const bucket = new s3.Bucket(this, 'MyBucket', {
  versioned: true,
  encryption: s3.BucketEncryption.KMS,
});

new appconfig.SourcedConfiguration(this, 'MySourcedConfiguration', {
  application,
  location: appconfig.ConfigurationSource.fromBucket(bucket, 'path/to/file.json'),
});
```

## Members

| Member | Description |
| --- | --- |
| `UNENCRYPTED` | Previous option. |
| `KMS_MANAGED` | Server-side KMS encryption with a master key managed by KMS. |
| `S3_MANAGED` | Server-side encryption with a master key managed by S3. |
| `KMS` | Server-side encryption with a KMS key managed by the user. |
| `DSSE_MANAGED` | Double server-side KMS encryption with a master key managed by KMS. |
| `DSSE` | Double server-side encryption with a KMS key managed by the user. |

## Referenced by

- [`BucketProps`](/v2/docs/aws-cdk-lib.aws_s3.BucketProps).encryption
- [`DefaultStagingStackOptions`](/v2/docs/@aws-cdk_app-staging-synthesizer-alpha.DefaultStagingStackOptions).stagingBucketEncryption