in source/custom-resource/lib/s3-bucket-encryption-helper.js [41:68]
bucketEncryptionHelper.prototype.enableDefaultBucketEncryption = function(bucket, algorithm, key, cb) {
console.log(['Enabling default encryption on bucket:', bucket].join(' '));
var params = {
Bucket: bucket,
ServerSideEncryptionConfiguration: {
Rules: [
{
ApplyServerSideEncryptionByDefault: {
SSEAlgorithm: algorithm
}
}
]
}
};
if (algorithm === 'aws:kms') {
params.ServerSideEncryptionConfiguration.Rules[0].ApplyServerSideEncryptionByDefault.KMSMasterKeyID = key;
}
s3.putBucketEncryption(params, (err, result) => {
if (err) {
console.log(['Failed to enable default bucket encryption:', err].join(' '));
return cb(err, null);
} else {
console.log("Successfully enabled default bucket encryption.");
return cb(null, "SUCCESS");
}
});
};