Menu
S3 now supports encryption to be applied by default when individual object PUT requests do not contain a specific encryption header.
How can this be set up as part of bucket creation during CloudFormation template? I have found the API call for this but it would be great if it could be supplied as an attribute within CloudFormation rather than a separate step.
So far the only options I see are
S3::BucketPolicy resource
628
By default, S3 bucket encryption option is disabled. Select the needed option, for example, AES-256. This is server-side encryption with Amazon S3-managed keys (SSE-S3).
Amazon S3's default encryption can be used to automate the encryption of new objects in your bucket, but default encryption does not change the encryption of existing objects in the same bucket.
S3 Replication Time Control, by default, includes S3 replication metrics and S3 event notifications, with which you can monitor the total number of S3 API operations that are pending replication, the total size of objects pending replication, and the maximum replication time.
As of some time apparently between last Friday and today, they've finally added a BucketEncryption property to S3 buckets in CloudFormation, allowing you to enable this default encryption.
59
If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With
