搭PutBucketEncryption配使用 AWS SDK或 CLI

下列程式碼範例會示範如何使用PutBucketEncryption。

.NET

AWS SDK for .NET

注意

還有更多關於 GitHub。尋找完整的範例，並瞭解如何在 AWS 代碼示例存儲庫。

    /// <summary>
    /// Set the bucket server side encryption to use AWSKMS with a customer-managed key id.
    /// </summary>
    /// <param name="bucketName">Name of the bucket.</param>
    /// <param name="kmsKeyId">The Id of the KMS Key.</param>
    /// <returns>True if successful.</returns>
    public static async Task<bool> SetBucketServerSideEncryption(string bucketName, string kmsKeyId)
    {
        var serverSideEncryptionByDefault = new ServerSideEncryptionConfiguration
        {
            ServerSideEncryptionRules = new List<ServerSideEncryptionRule>
            {
                new ServerSideEncryptionRule
                {
                    ServerSideEncryptionByDefault = new ServerSideEncryptionByDefault
                    {
                        ServerSideEncryptionAlgorithm = ServerSideEncryptionMethod.AWSKMS,
                        ServerSideEncryptionKeyManagementServiceKeyId = kmsKeyId
                    }
                }
            }
        };
        try
        {
            var encryptionResponse = await _s3Client.PutBucketEncryptionAsync(new PutBucketEncryptionRequest
            {
                BucketName = bucketName,
                ServerSideEncryptionConfiguration = serverSideEncryptionByDefault,
            });
            
            return encryptionResponse.HttpStatusCode == HttpStatusCode.OK;
        }
        catch (AmazonS3Exception ex)
        {
            Console.WriteLine(ex.ErrorCode == "AccessDenied"
                ? $"This account does not have permission to set encryption on {bucketName}, please try again."
                : $"Unable to set bucket encryption for bucket {bucketName}, {ex.Message}");
        }
        return false;
    }

• 有API關詳細資訊，請參閱 PutBucketEncryption（AWS SDK for .NET API參考。

CLI

AWS CLI

設定值區的伺服器端加密

下列put-bucket-encryption範例會將AES256加密設定為指定值區的預設值。

aws s3api put-bucket-encryption \
    --bucket my-bucket \
    --server-side-encryption-configuration '{"Rules": [{"ApplyServerSideEncryptionByDefault": {"SSEAlgorithm": "AES256"}}]}'

此命令不會產生輸出。

• 有API關詳細資訊，請參閱 PutBucketEncryption（AWS CLI 指令參考。

PowerShell

適用的工具 PowerShell

範例 1：此命令使用指定儲存貯體上的 Amazon S3 受管金鑰 (SSE-S3) 啟用預設AES256伺服器端加密。

$Encryptionconfig = @{ServerSideEncryptionByDefault = @{ServerSideEncryptionAlgorithm = "AES256"}}
Set-S3BucketEncryption -BucketName 's3testbucket' -ServerSideEncryptionConfiguration_ServerSideEncryptionRule $Encryptionconfig

• 有API關詳細資訊，請參閱 PutBucketEncryption（AWS Tools for PowerShell 指令程式參照。

有關的完整列表 AWS SDK開發人員指南和代碼示例，請參閱搭配 AWS SDK 使用此服務。本主題也包含有關入門的資訊以及舊SDK版的詳細資訊。