feat: Define the default server-side bucket encryption

scribd · Nov 14, 2023 · 4d1c8c3 · 4d1c8c3
1 parent 4a4fb99
commit 4d1c8c3
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/s3_bucket.tf b/s3_bucket.tf
@@ -34,6 +34,14 @@ resource "aws_s3_bucket" "s3_buckets" {
       max_age_seconds = cors_rule.value.max_age_seconds
     }
   }
+
+  server_side_encryption_configuration {
+    rule {
+      apply_server_side_encryption_by_default {
+        sse_algorithm = "AES256"
+      }
+    }
+  }
 }
 
 # Make sure no object could ever be public