AWS SDK for Ruby
Developer Guide

Server-Side Encryption

To encrypt objects on the server, you have the following options.

  • You can have Amazon S3 automatically encrypt objects as you upload them to a bucket. Once you configure a bucket with this option, every object that you upload--from that point on--is encrypted.

  • You can have Amazon S3 encrypt an object when you upload it to a bucket. The disadvantage with this approach is that you can still upload objects that are not encrypted.

  • You can have Amazon S3 reject objects that are not encrypted when you attempt to upload them to a bucket.

Learn about service-side encryption in Amazon S3 at Protecting Data Using Server-Side Encryption.