- class aws_cdk.aws_s3.BucketEncryption(value)
What kind of server-side encryption to apply to this bucket.
bucket = s3.Bucket(self, "MyEncryptedBucket", encryption=s3.BucketEncryption.KMS ) # you can access the encryption key: assert(bucket.encryption_key instanceof kms.Key)
Server-side encryption with a KMS key managed by the user.
encryptionKeyis specified, this key will be used, otherwise, one will be defined.
Server-side KMS encryption with a master key managed by KMS.
Server-side encryption with a master key managed by S3.
Objects in the bucket are not encrypted.