github.com/khulnasoft-lab/defsec@v1.0.5-0.20230827010352-5e9f46893d95/avd_docs/aws/s3/AVD-AWS-0088/CloudFormation.md (about) 1 2 Configure bucket encryption 3 4 ```yaml 5 Resources: 6 GoodExample: 7 Properties: 8 BucketEncryption: 9 ServerSideEncryptionConfiguration: 10 - BucketKeyEnabled: true 11 ServerSideEncryptionByDefault: 12 SSEAlgorithm: AES256 13 Type: AWS::S3::Bucket 14 15 ``` 16 17