bucketEncryptionHelper.prototype.enableDefaultBucketEncryption = function()

in source/custom-resource/lib/s3-bucket-encryption-helper.js [41:68]


    bucketEncryptionHelper.prototype.enableDefaultBucketEncryption = function(bucket, algorithm, key, cb) {
        console.log(['Enabling default encryption on bucket:', bucket].join(' '));
        var params = {
          Bucket: bucket,
          ServerSideEncryptionConfiguration: {
            Rules: [
              {
                ApplyServerSideEncryptionByDefault: {
                  SSEAlgorithm: algorithm
                }
              }
            ]
          }
        };
        if (algorithm === 'aws:kms') {
          params.ServerSideEncryptionConfiguration.Rules[0].ApplyServerSideEncryptionByDefault.KMSMasterKeyID = key;
        }

        s3.putBucketEncryption(params, (err, result) => {
            if (err) {
              console.log(['Failed to enable default bucket encryption:', err].join(' '));
              return cb(err, null);
            } else {
              console.log("Successfully enabled default bucket encryption.");
              return cb(null, "SUCCESS");
            }
        });
    };