AWS CDK Reference

Appearance

v2.273.0

BucketEncryption Enum ​

What kind of server-side encryption to apply to this bucket.

Source
aws-s3/lib/bucket.ts
Type last changed
v2.84.0 · 14 Jun 2023

Example ​

ts
declare const application: appconfig.Application;

const bucket = new s3.Bucket(this, 'MyBucket', {
  versioned: true,
  encryption: s3.BucketEncryption.KMS,
});

new appconfig.SourcedConfiguration(this, 'MySourcedConfiguration', {
  application,
  location: appconfig.ConfigurationSource.fromBucket(bucket, 'path/to/file.json'),
});

Members ​

MemberDescription
UNENCRYPTEDPrevious option.
KMS_MANAGEDServer-side KMS encryption with a master key managed by KMS.
S3_MANAGEDServer-side encryption with a master key managed by S3.
KMSServer-side encryption with a KMS key managed by the user.
DSSE_MANAGEDDouble server-side KMS encryption with a master key managed by KMS.
DSSEDouble server-side encryption with a KMS key managed by the user.

Referenced by ​

  • BucketProps.encryptionencryptionencryptionEncryptionEncryption
  • DefaultStagingStackOptions.stagingBucketEncryptionstaging_bucket_encryptionstagingBucketEncryptionStagingBucketEncryptionStagingBucketEncryption