published on Wednesday, Apr 29, 2026 by pulumiverse
published on Wednesday, Apr 29, 2026 by pulumiverse
The scaleway.object.BucketServerSideEncryptionConfiguration resource allows you to manage server-side encryption configuration for Scaleway Object Storage buckets.
Refer to the dedicated documentation for more information on server-side encryption.
Example Usage
import * as pulumi from "@pulumi/pulumi";
import * as scaleway from "@pulumiverse/scaleway";
const test = new scaleway.object.Bucket("test", {
name: "my-unique-bucket-name",
region: "fr-par",
});
const testBucketServerSideEncryptionConfiguration = new scaleway.object.BucketServerSideEncryptionConfiguration("test", {
bucket: test.name,
region: "fr-par",
rules: [{
applyServerSideEncryptionByDefault: {
sseAlgorithm: "AES256",
},
}],
});
import pulumi
import pulumiverse_scaleway as scaleway
test = scaleway.object.Bucket("test",
name="my-unique-bucket-name",
region="fr-par")
test_bucket_server_side_encryption_configuration = scaleway.object.BucketServerSideEncryptionConfiguration("test",
bucket=test.name,
region="fr-par",
rules=[{
"apply_server_side_encryption_by_default": {
"sse_algorithm": "AES256",
},
}])
package main
import (
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
"github.com/pulumiverse/pulumi-scaleway/sdk/go/scaleway/object"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
test, err := object.NewBucket(ctx, "test", &object.BucketArgs{
Name: pulumi.String("my-unique-bucket-name"),
Region: pulumi.String("fr-par"),
})
if err != nil {
return err
}
_, err = object.NewBucketServerSideEncryptionConfiguration(ctx, "test", &object.BucketServerSideEncryptionConfigurationArgs{
Bucket: test.Name,
Region: "fr-par",
Rules: object.BucketServerSideEncryptionConfigurationRuleArray{
&object.BucketServerSideEncryptionConfigurationRuleArgs{
ApplyServerSideEncryptionByDefault: &object.BucketServerSideEncryptionConfigurationRuleApplyServerSideEncryptionByDefaultArgs{
SseAlgorithm: pulumi.String("AES256"),
},
},
},
})
if err != nil {
return err
}
return nil
})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Scaleway = Pulumiverse.Scaleway;
return await Deployment.RunAsync(() =>
{
var test = new Scaleway.Object.Bucket("test", new()
{
Name = "my-unique-bucket-name",
Region = "fr-par",
});
var testBucketServerSideEncryptionConfiguration = new Scaleway.Object.BucketServerSideEncryptionConfiguration("test", new()
{
Bucket = test.Name,
Region = "fr-par",
Rules = new[]
{
new Scaleway.Object.Inputs.BucketServerSideEncryptionConfigurationRuleArgs
{
ApplyServerSideEncryptionByDefault = new Scaleway.Object.Inputs.BucketServerSideEncryptionConfigurationRuleApplyServerSideEncryptionByDefaultArgs
{
SseAlgorithm = "AES256",
},
},
},
});
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.scaleway.object.Bucket;
import com.pulumi.scaleway.object.BucketArgs;
import com.pulumi.scaleway.object.BucketServerSideEncryptionConfiguration;
import com.pulumi.scaleway.object.BucketServerSideEncryptionConfigurationArgs;
import com.pulumi.scaleway.object.inputs.BucketServerSideEncryptionConfigurationRuleArgs;
import com.pulumi.scaleway.object.inputs.BucketServerSideEncryptionConfigurationRuleApplyServerSideEncryptionByDefaultArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var test = new Bucket("test", BucketArgs.builder()
.name("my-unique-bucket-name")
.region("fr-par")
.build());
var testBucketServerSideEncryptionConfiguration = new BucketServerSideEncryptionConfiguration("testBucketServerSideEncryptionConfiguration", BucketServerSideEncryptionConfigurationArgs.builder()
.bucket(test.name())
.region("fr-par")
.rules(BucketServerSideEncryptionConfigurationRuleArgs.builder()
.applyServerSideEncryptionByDefault(BucketServerSideEncryptionConfigurationRuleApplyServerSideEncryptionByDefaultArgs.builder()
.sseAlgorithm("AES256")
.build())
.build())
.build());
}
}
resources:
test:
type: scaleway:object:Bucket
properties:
name: my-unique-bucket-name
region: fr-par
testBucketServerSideEncryptionConfiguration:
type: scaleway:object:BucketServerSideEncryptionConfiguration
name: test
properties:
bucket: ${test.name}
region: fr-par
rules:
- applyServerSideEncryptionByDefault:
sseAlgorithm: AES256
import * as pulumi from "@pulumi/pulumi";
import * as scaleway from "@pulumiverse/scaleway";
const test = new scaleway.object.Bucket("test", {name: "my-unique-bucket-name"});
const testBucketServerSideEncryptionConfiguration = new scaleway.object.BucketServerSideEncryptionConfiguration("test", {
bucket: test.name,
rules: [{
applyServerSideEncryptionByDefault: {
sseAlgorithm: "AES256",
},
}],
});
import pulumi
import pulumiverse_scaleway as scaleway
test = scaleway.object.Bucket("test", name="my-unique-bucket-name")
test_bucket_server_side_encryption_configuration = scaleway.object.BucketServerSideEncryptionConfiguration("test",
bucket=test.name,
rules=[{
"apply_server_side_encryption_by_default": {
"sse_algorithm": "AES256",
},
}])
package main
import (
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
"github.com/pulumiverse/pulumi-scaleway/sdk/go/scaleway/object"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
test, err := object.NewBucket(ctx, "test", &object.BucketArgs{
Name: pulumi.String("my-unique-bucket-name"),
})
if err != nil {
return err
}
_, err = object.NewBucketServerSideEncryptionConfiguration(ctx, "test", &object.BucketServerSideEncryptionConfigurationArgs{
Bucket: test.Name,
Rules: object.BucketServerSideEncryptionConfigurationRuleArray{
&object.BucketServerSideEncryptionConfigurationRuleArgs{
ApplyServerSideEncryptionByDefault: &object.BucketServerSideEncryptionConfigurationRuleApplyServerSideEncryptionByDefaultArgs{
SseAlgorithm: pulumi.String("AES256"),
},
},
},
})
if err != nil {
return err
}
return nil
})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Scaleway = Pulumiverse.Scaleway;
return await Deployment.RunAsync(() =>
{
var test = new Scaleway.Object.Bucket("test", new()
{
Name = "my-unique-bucket-name",
});
var testBucketServerSideEncryptionConfiguration = new Scaleway.Object.BucketServerSideEncryptionConfiguration("test", new()
{
Bucket = test.Name,
Rules = new[]
{
new Scaleway.Object.Inputs.BucketServerSideEncryptionConfigurationRuleArgs
{
ApplyServerSideEncryptionByDefault = new Scaleway.Object.Inputs.BucketServerSideEncryptionConfigurationRuleApplyServerSideEncryptionByDefaultArgs
{
SseAlgorithm = "AES256",
},
},
},
});
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.scaleway.object.Bucket;
import com.pulumi.scaleway.object.BucketArgs;
import com.pulumi.scaleway.object.BucketServerSideEncryptionConfiguration;
import com.pulumi.scaleway.object.BucketServerSideEncryptionConfigurationArgs;
import com.pulumi.scaleway.object.inputs.BucketServerSideEncryptionConfigurationRuleArgs;
import com.pulumi.scaleway.object.inputs.BucketServerSideEncryptionConfigurationRuleApplyServerSideEncryptionByDefaultArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var test = new Bucket("test", BucketArgs.builder()
.name("my-unique-bucket-name")
.build());
var testBucketServerSideEncryptionConfiguration = new BucketServerSideEncryptionConfiguration("testBucketServerSideEncryptionConfiguration", BucketServerSideEncryptionConfigurationArgs.builder()
.bucket(test.name())
.rules(BucketServerSideEncryptionConfigurationRuleArgs.builder()
.applyServerSideEncryptionByDefault(BucketServerSideEncryptionConfigurationRuleApplyServerSideEncryptionByDefaultArgs.builder()
.sseAlgorithm("AES256")
.build())
.build())
.build());
}
}
resources:
test:
type: scaleway:object:Bucket
properties:
name: my-unique-bucket-name
testBucketServerSideEncryptionConfiguration:
type: scaleway:object:BucketServerSideEncryptionConfiguration
name: test
properties:
bucket: ${test.name}
rules:
- applyServerSideEncryptionByDefault:
sseAlgorithm: AES256
Create BucketServerSideEncryptionConfiguration Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new BucketServerSideEncryptionConfiguration(name: string, args: BucketServerSideEncryptionConfigurationArgs, opts?: CustomResourceOptions);@overload
def BucketServerSideEncryptionConfiguration(resource_name: str,
args: BucketServerSideEncryptionConfigurationArgs,
opts: Optional[ResourceOptions] = None)
@overload
def BucketServerSideEncryptionConfiguration(resource_name: str,
opts: Optional[ResourceOptions] = None,
bucket: Optional[str] = None,
rules: Optional[Sequence[BucketServerSideEncryptionConfigurationRuleArgs]] = None)func NewBucketServerSideEncryptionConfiguration(ctx *Context, name string, args BucketServerSideEncryptionConfigurationArgs, opts ...ResourceOption) (*BucketServerSideEncryptionConfiguration, error)public BucketServerSideEncryptionConfiguration(string name, BucketServerSideEncryptionConfigurationArgs args, CustomResourceOptions? opts = null)
public BucketServerSideEncryptionConfiguration(String name, BucketServerSideEncryptionConfigurationArgs args)
public BucketServerSideEncryptionConfiguration(String name, BucketServerSideEncryptionConfigurationArgs args, CustomResourceOptions options)
type: scaleway:object:BucketServerSideEncryptionConfiguration
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
Parameters
- name string
- The unique name of the resource.
- args BucketServerSideEncryptionConfigurationArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args BucketServerSideEncryptionConfigurationArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args BucketServerSideEncryptionConfigurationArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args BucketServerSideEncryptionConfigurationArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args BucketServerSideEncryptionConfigurationArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Constructor example
The following reference example uses placeholder values for all input properties.
var bucketServerSideEncryptionConfigurationResource = new Scaleway.Object.BucketServerSideEncryptionConfiguration("bucketServerSideEncryptionConfigurationResource", new()
{
Bucket = "string",
Rules = new[]
{
new Scaleway.Object.Inputs.BucketServerSideEncryptionConfigurationRuleArgs
{
ApplyServerSideEncryptionByDefault = new Scaleway.Object.Inputs.BucketServerSideEncryptionConfigurationRuleApplyServerSideEncryptionByDefaultArgs
{
SseAlgorithm = "string",
},
},
},
});
example, err := object.NewBucketServerSideEncryptionConfiguration(ctx, "bucketServerSideEncryptionConfigurationResource", &object.BucketServerSideEncryptionConfigurationArgs{
Bucket: pulumi.String("string"),
Rules: object.BucketServerSideEncryptionConfigurationRuleArray{
&object.BucketServerSideEncryptionConfigurationRuleArgs{
ApplyServerSideEncryptionByDefault: &object.BucketServerSideEncryptionConfigurationRuleApplyServerSideEncryptionByDefaultArgs{
SseAlgorithm: pulumi.String("string"),
},
},
},
})
var bucketServerSideEncryptionConfigurationResource = new BucketServerSideEncryptionConfiguration("bucketServerSideEncryptionConfigurationResource", BucketServerSideEncryptionConfigurationArgs.builder()
.bucket("string")
.rules(BucketServerSideEncryptionConfigurationRuleArgs.builder()
.applyServerSideEncryptionByDefault(BucketServerSideEncryptionConfigurationRuleApplyServerSideEncryptionByDefaultArgs.builder()
.sseAlgorithm("string")
.build())
.build())
.build());
bucket_server_side_encryption_configuration_resource = scaleway.object.BucketServerSideEncryptionConfiguration("bucketServerSideEncryptionConfigurationResource",
bucket="string",
rules=[{
"apply_server_side_encryption_by_default": {
"sse_algorithm": "string",
},
}])
const bucketServerSideEncryptionConfigurationResource = new scaleway.object.BucketServerSideEncryptionConfiguration("bucketServerSideEncryptionConfigurationResource", {
bucket: "string",
rules: [{
applyServerSideEncryptionByDefault: {
sseAlgorithm: "string",
},
}],
});
type: scaleway:object:BucketServerSideEncryptionConfiguration
properties:
bucket: string
rules:
- applyServerSideEncryptionByDefault:
sseAlgorithm: string
BucketServerSideEncryptionConfiguration Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The BucketServerSideEncryptionConfiguration resource accepts the following input properties:
- Bucket string
- The bucket's name or regional ID.
- Rules
List<Pulumiverse.
Scaleway. Object. Inputs. Bucket Server Side Encryption Configuration Rule> - Set of server-side encryption configuration rules
- Bucket string
- The bucket's name or regional ID.
- Rules
[]Bucket
Server Side Encryption Configuration Rule Args - Set of server-side encryption configuration rules
- bucket String
- The bucket's name or regional ID.
- rules
List<Bucket
Server Side Encryption Configuration Rule> - Set of server-side encryption configuration rules
- bucket string
- The bucket's name or regional ID.
- rules
Bucket
Server Side Encryption Configuration Rule[] - Set of server-side encryption configuration rules
- bucket str
- The bucket's name or regional ID.
- rules
Sequence[Bucket
Server Side Encryption Configuration Rule Args] - Set of server-side encryption configuration rules
- bucket String
- The bucket's name or regional ID.
- rules List<Property Map>
- Set of server-side encryption configuration rules
Outputs
All input properties are implicitly available as output properties. Additionally, the BucketServerSideEncryptionConfiguration resource produces the following output properties:
- Id string
- The provider-assigned unique ID for this managed resource.
- Id string
- The provider-assigned unique ID for this managed resource.
- id String
- The provider-assigned unique ID for this managed resource.
- id string
- The provider-assigned unique ID for this managed resource.
- id str
- The provider-assigned unique ID for this managed resource.
- id String
- The provider-assigned unique ID for this managed resource.
Look up Existing BucketServerSideEncryptionConfiguration Resource
Get an existing BucketServerSideEncryptionConfiguration resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: BucketServerSideEncryptionConfigurationState, opts?: CustomResourceOptions): BucketServerSideEncryptionConfiguration@staticmethod
def get(resource_name: str,
id: str,
opts: Optional[ResourceOptions] = None,
bucket: Optional[str] = None,
rules: Optional[Sequence[BucketServerSideEncryptionConfigurationRuleArgs]] = None) -> BucketServerSideEncryptionConfigurationfunc GetBucketServerSideEncryptionConfiguration(ctx *Context, name string, id IDInput, state *BucketServerSideEncryptionConfigurationState, opts ...ResourceOption) (*BucketServerSideEncryptionConfiguration, error)public static BucketServerSideEncryptionConfiguration Get(string name, Input<string> id, BucketServerSideEncryptionConfigurationState? state, CustomResourceOptions? opts = null)public static BucketServerSideEncryptionConfiguration get(String name, Output<String> id, BucketServerSideEncryptionConfigurationState state, CustomResourceOptions options)resources: _: type: scaleway:object:BucketServerSideEncryptionConfiguration get: id: ${id}- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- Bucket string
- The bucket's name or regional ID.
- Rules
List<Pulumiverse.
Scaleway. Object. Inputs. Bucket Server Side Encryption Configuration Rule> - Set of server-side encryption configuration rules
- Bucket string
- The bucket's name or regional ID.
- Rules
[]Bucket
Server Side Encryption Configuration Rule Args - Set of server-side encryption configuration rules
- bucket String
- The bucket's name or regional ID.
- rules
List<Bucket
Server Side Encryption Configuration Rule> - Set of server-side encryption configuration rules
- bucket string
- The bucket's name or regional ID.
- rules
Bucket
Server Side Encryption Configuration Rule[] - Set of server-side encryption configuration rules
- bucket str
- The bucket's name or regional ID.
- rules
Sequence[Bucket
Server Side Encryption Configuration Rule Args] - Set of server-side encryption configuration rules
- bucket String
- The bucket's name or regional ID.
- rules List<Property Map>
- Set of server-side encryption configuration rules
Supporting Types
BucketServerSideEncryptionConfigurationRule, BucketServerSideEncryptionConfigurationRuleArgs
- Apply
Server Pulumiverse.Side Encryption By Default Scaleway. Object. Inputs. Bucket Server Side Encryption Configuration Rule Apply Server Side Encryption By Default - Single object for setting server-side encryption by default.
- Apply
Server BucketSide Encryption By Default Server Side Encryption Configuration Rule Apply Server Side Encryption By Default - Single object for setting server-side encryption by default.
- apply
Server BucketSide Encryption By Default Server Side Encryption Configuration Rule Apply Server Side Encryption By Default - Single object for setting server-side encryption by default.
- apply
Server BucketSide Encryption By Default Server Side Encryption Configuration Rule Apply Server Side Encryption By Default - Single object for setting server-side encryption by default.
- apply_
server_ Bucketside_ encryption_ by_ default Server Side Encryption Configuration Rule Apply Server Side Encryption By Default - Single object for setting server-side encryption by default.
- apply
Server Property MapSide Encryption By Default - Single object for setting server-side encryption by default.
BucketServerSideEncryptionConfigurationRuleApplyServerSideEncryptionByDefault, BucketServerSideEncryptionConfigurationRuleApplyServerSideEncryptionByDefaultArgs
- Sse
Algorithm string - Server-side encryption algorithm to use. Valid values are
AES256.
- Sse
Algorithm string - Server-side encryption algorithm to use. Valid values are
AES256.
- sse
Algorithm String - Server-side encryption algorithm to use. Valid values are
AES256.
- sse
Algorithm string - Server-side encryption algorithm to use. Valid values are
AES256.
- sse_
algorithm str - Server-side encryption algorithm to use. Valid values are
AES256.
- sse
Algorithm String - Server-side encryption algorithm to use. Valid values are
AES256.
Import
Server-side encryption configurations can be imported using the {region}/{bucketName} identifier, as shown below:
$ pulumi import scaleway:object/bucketServerSideEncryptionConfiguration:BucketServerSideEncryptionConfiguration test fr-par/my-bucket-name
Important: The
projectIdattribute has a particular behavior with S3 products because the S3 API is scoped by project. If you are using a project different from the default one, you have to specify the project ID at the end of the import command.
$ pulumi import scaleway:object/bucketServerSideEncryptionConfiguration:BucketServerSideEncryptionConfiguration test fr-par/my-bucket-name@11111111-1111-1111-1111-111111111111
To learn more about importing existing cloud resources, see Importing resources.
Package Details
- Repository
- scaleway pulumiverse/pulumi-scaleway
- License
- Apache-2.0
- Notes
- This Pulumi package is based on the
scalewayTerraform Provider.
published on Wednesday, Apr 29, 2026 by pulumiverse
