# AWS S3 Bucket Enable Encryption

**URL:** https://forum.serverless.com/t/aws-s3-bucket-enable-encryption/3791
**Category:** Serverless Framework
**Created:** [February 16, 2018, 4:41pm UTC](https://forum.serverless.com/t/aws-s3-bucket-enable-encryption/3791 "2018-02-16T16:41:56Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![pgali](https://yyz2.discourse-cdn.com/flex036/user_avatar/forum.serverless.com/pgali/32/1651_2.png) [@pgali](https://forum.serverless.com/u/pgali)
#### Post date: [February 16, 2018, 4:41pm UTC](https://forum.serverless.com/t/aws-s3-bucket-enable-encryption/3791/1 "2018-02-16T16:41:56Z")

</div>

SLS provides configuration settings to define buckets created by SLS to be encrypted. I am looking for an example were I can use the same syntax to encrypt my buckets I defined as resources in my ssl yaml file

Thank you in advance.

---

<div class="post-metadata">

### Author: ![chgerkens](https://yyz2.discourse-cdn.com/flex036/user_avatar/forum.serverless.com/chgerkens/32/309_2.png) [@chgerkens](https://forum.serverless.com/u/chgerkens)
#### Post date: [February 26, 2018, 1:02pm UTC](https://forum.serverless.com/t/aws-s3-bucket-enable-encryption/3791/2 "2018-02-26T13:02:35Z")

</div>

You can enable default server-side encryption in the resources (cloudformation) section of your serverless.yml file. Example for AES256 encryption:

```
resources:
  Resources:
    MyDefaultEncryptedBucket:
      Type: AWS::S3::Bucket
      Properties:
        BucketName: mydefaultencryptedbucket
        BucketEncryption:
          ServerSideEncryptionConfiguration:
            - ServerSideEncryptionByDefault:
                SSEAlgorithm: AES256

```

See also cloudformation user guide: [https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-s3-bucket-bucketencryption.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-s3-bucket-bucketencryption.html)

If you want to enforce encryption, you have to add a policy: [https://aws.amazon.com/de/blogs/security/how-to-prevent-uploads-of-unencrypted-objects-to-amazon-s3/](https://aws.amazon.com/de/blogs/security/how-to-prevent-uploads-of-unencrypted-objects-to-amazon-s3/)

---

<div class="post-metadata">

### Author: ![Selimcse98](https://avatars.discourse-cdn.com/v4/letter/s/47e85d/32.png) [@Selimcse98](https://forum.serverless.com/u/Selimcse98)
#### Post date: [July 18, 2018, 5:09pm UTC](https://forum.serverless.com/t/aws-s3-bucket-enable-encryption/3791/3 "2018-07-18T17:09:08Z")

</div>

JSON:  
{  
“Resources”: {  
“MyBucket”: {  
“Type” : “AWS::S3::Bucket”,  
“Properties” : {  
“BucketEncryption”: {  
“ServerSideEncryptionConfiguration”: [  
{  
“ServerSideEncryptionByDefault”: {  
“SSEAlgorithm”: “AES256”  
}  
}  
]  
}  
}  
}  
}  
}