How to specify default encryption for s3 bucket using aws cli?

Question

是否可以使用 aws cli 为 s3 存储桶设置默认 kms 加密？

Answer 1

For AES256:

aws s3api put-bucket-encryption --bucket bucketname --server-side-encryption-configuration '{"Rules": [{"ApplyServerSideEncryptionByDefault": {"SSEAlgorithm": "AES256"}}]}

For KMS:

aws s3api put-bucket-encryption --bucket bucketname --server-side-encryption-configuration '{"Rules": [{"ApplyServerSideEncryptionByDefault": {"SSEAlgorithm": "aws:kms","KMSMasterKeyID": "kmskeyID"}}]}