S3 Bucket Encryption

Step 1: Create the KMS Key

module "encryption_key" {
  source  = "registry.patterneddesigns.ca/patterneddesigns/kms-key/aws"
  version = "1.0.0"

  alias       = "alias/s3-encryption"
  description = "Encryption key for S3 bucket data"
}

Step 2: Configure S3 Bucket Encryption

Apply the KMS key to your S3 bucket’s default encryption settings.

Step 3: Verify Encryption

Upload a file and verify it’s encrypted with your KMS key.