Skip to content

S3UpdateObjectEncryptionSSEKMS

Source code in docs_src/capo_s3_control/types/s3_update_object_encryption_ssekms.py
class S3UpdateObjectEncryptionSSEKMS(TypedDict, closed=True):
    kms_key_arn: (
        "capo_s3_control.types.non_empty_kms_key_arn_string.NonEmptyKmsKeyArnString"
    )
    """<p>Specifies the Amazon Web Services KMS key Amazon Resource Name (ARN) to use for the updated server-side encryption type. Required if <code>UpdateObjectEncryption</code> specifies <code>SSEKMS</code>.</p>"""
    bucket_key_enabled: NotRequired["capo_s3_control.types.boolean.Boolean"]
    """<p>Specifies whether Amazon S3 should use an S3 Bucket Key for object encryption with server-side encryption using Key Management Service (KMS) keys (SSE-KMS). If this value isn't specified, it defaults to <code>false</code>. Setting this value to <code>true</code> causes Amazon S3 to use an S3 Bucket Key for update object encryption with SSE-KMS.</p>"""

bucket_key_enabled instance-attribute

bucket_key_enabled: NotRequired[Boolean]

Specifies whether Amazon S3 should use an S3 Bucket Key for object encryption with server-side encryption using Key Management Service (KMS) keys (SSE-KMS). If this value isn't specified, it defaults to false. Setting this value to true causes Amazon S3 to use an S3 Bucket Key for update object encryption with SSE-KMS.

kms_key_arn instance-attribute

Specifies the Amazon Web Services KMS key Amazon Resource Name (ARN) to use for the updated server-side encryption type. Required if UpdateObjectEncryption specifies SSEKMS.