Class: Aws::S3::Types::BlockedEncryptionTypes

Inherits:
Struct
  • Object
show all
Includes:
Aws::Structure
Defined in:
lib/aws-sdk-s3/types.rb

Overview

A bucket-level setting for Amazon S3 general purpose buckets used to prevent the upload of new objects encrypted with the specified server-side encryption type. For example, blocking an encryption type will block ‘PutObject`, `CopyObject`, `PostObject`, multipart upload, and replication requests to the bucket for objects with the specified encryption type. However, you can continue to read and list any pre-existing objects already encrypted with the specified encryption type. For more information, see [Blocking an encryption type for a general purpose bucket].

This data type is used with the following actions:

  • PutBucketEncryption][2
  • GetBucketEncryption][3
  • DeleteBucketEncryption][4

Permissions

: You must have the ‘s3:PutEncryptionConfiguration` permission to

block or unblock an encryption type for a bucket.

You must have the `s3:GetEncryptionConfiguration` permission to view
a bucket's encryption type.

[1]: docs.aws.amazon.com/AmazonS3/userguide/block-encryption-type.html [2]: docs.aws.amazon.com/AmazonS3/latest/API/API_PutBucketEncryption.html [3]: docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketEncryption.html [4]: docs.aws.amazon.com/AmazonS3/latest/API/API_DeleteBucketEncryption.html

See Also:

Constant Summary collapse

SENSITIVE = 
[]

Instance Attribute Summary collapse

Instance Attribute Details

#encryption_type ⇒ Array<String>

The object encryption type that you want to block or unblock for an Amazon S3 general purpose bucket.

<note markdown=“1”> Currently, this parameter only supports blocking or unblocking server side encryption with customer-provided keys (SSE-C). For more information about SSE-C, see [Using server-side encryption with customer-provided keys (SSE-C)].

</note>

[1]: docs.aws.amazon.com/AmazonS3/latest/userguide/ServerSideEncryptionCustomerKeys.html

Returns:

  • (Array<String>) 


432
433
434
435
436
 
# File 'lib/aws-sdk-s3/types.rb', line 432

class BlockedEncryptionTypes < Struct.new(
  :encryption_type)
  SENSITIVE = []
  include Aws::Structure
end