How do I set up an S3 bucket to use SSE S3 encryption Appare

Question

How do I set up an S3 bucket to use SSE S3 encryption Apparently it s a requirement for ALB access logs I can see how to do it in the console but neither TF nor Pulumi docs are enlightening me

billowy-army-68599 · Answer

missed this <https www pulumi com docs reference pkg aws s3 bucket enable default server side encryption>

little-cartoon-10569 · Answer

Nope That allows me to choose from KMS or AES256

little-cartoon-10569 · Answer

I want S3

little-cartoon-10569 · Answer

I went through input ts there is no overlap between the types in that area and the types further down that allow S3

little-cartoon-10569 · Answer

And it all seems correct There must be a completely different chunk of configuration for SSE S3

billowy-army-68599 · Answer

i believe it turns up as aes256 reading through some issues now <https github com cloudposse terraform aws lb s3 bucket issues 9 issuecomment 542656328>

billowy-army-68599 · Answer

< little cartoon 10569> it looks like it you set server side by default and omit a key it uses the S3 default keys

billowy-army-68599 · Answer

I ll try turn this into a snippet

little-cartoon-10569 · Answer

Oh Ok Docs eh Harder than picking paint colours for bathrooms

brief-ram-15160 · Answer

```const myBucket = new aws s3 Bucket myBucketName serverSideEncryptionConfiguration rule applyServerSideEncryptionByDefault sseAlgorithm AES256 lifecycleRules enabled true expiration days 3 ``` default encryption