-
Notifications
You must be signed in to change notification settings - Fork 17
/
BucketEncryption.go
34 lines (30 loc) · 1.15 KB
/
BucketEncryption.go
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
package awss3
// What kind of server-side encryption to apply to this bucket.
//
// Example:
// bucket := s3.NewBucket(this, jsii.String("MyEncryptedBucket"), &BucketProps{
// Encryption: s3.BucketEncryption_KMS,
// })
//
// // you can access the encryption key:
// assert(bucket.EncryptionKey instanceof kms.Key)
//
type BucketEncryption string
const (
// Previous option.
//
// Buckets can not be unencrypted now.
// See: https://docs.aws.amazon.com/AmazonS3/latest/userguide/serv-side-encryption.html
//
// Deprecated: S3 applies server-side encryption with SSE-S3 for every bucket
// that default encryption is not configured.
BucketEncryption_UNENCRYPTED BucketEncryption = "UNENCRYPTED"
// Server-side KMS encryption with a master key managed by KMS.
BucketEncryption_KMS_MANAGED BucketEncryption = "KMS_MANAGED"
// Server-side encryption with a master key managed by S3.
BucketEncryption_S3_MANAGED BucketEncryption = "S3_MANAGED"
// Server-side encryption with a KMS key managed by the user.
//
// If `encryptionKey` is specified, this key will be used, otherwise, one will be defined.
BucketEncryption_KMS BucketEncryption = "KMS"
)