s3-bucket-server-side-encryption-enabled - AWS Config
AWS CloudFormation template

s3-bucket-server-side-encryption-enabled

Checks that your Amazon S3 bucket either has Amazon S3 default encryption enabled or that the S3 bucket policy explicitly denies put-object requests without server side encryption that uses AES-256 or AWS Key Management Service.

Identifier: S3_BUCKET_SERVER_SIDE_ENCRYPTION_ENABLED

Trigger type: Configuration changes

AWS Region: All supported AWS regions

Parameters:

None

AWS CloudFormation template

To create AWS Config managed rules with AWS CloudFormation templates, see Creating AWS Config Managed Rules With AWS CloudFormation Templates.