Enable S3 default encryption using AWS CLI

To enable:

aws s3api put-bucket-encryption --bucket my-bucket --server-side-encryption-configuration '{"Rules": [{"ApplyServerSideEncryptionByDefault": {"SSEAlgorithm": "AES256"}}]}'

To disable:

aws s3api delete-bucket-encryption --bucket my-bucket

see also

• AWS CLI s3api put-bucket-encryption
• AWS CLI s3api delete-bucket-encryption