feat: Add s3 server side encryption

clburlison · Dec 17, 2021 · 1d47849 · 1d47849
1 parent 0ba2962
commit 1d47849
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/s3_bucket.tf b/s3_bucket.tf
@@ -22,6 +22,14 @@ resource "aws_s3_bucket" "munki-bucket" {
     prevent_destroy = false
   }
 
+  server_side_encryption_configuration {
+    rule {
+      apply_server_side_encryption_by_default {
+        sse_algorithm = "aws:kms"
+      }
+    }
+  }
+
   tags = merge(
     var.tags,
     {