Sign in Dashboard Get started
  1. Packages
  2. Packages
  3. Scaleway
  4. API Docs
  5. object
  6. BucketServerSideEncryptionConfiguration
Viewing docs for Scaleway v1.50.0
published on Tuesday, Jun 2, 2026 by pulumiverse
Schema (JSON)
pulumiverse/pulumi-scaleway

scaleway.object.BucketServerSideEncryptionConfiguration

scaleway logo
Viewing docs for Scaleway v1.50.0
published on Tuesday, Jun 2, 2026 by pulumiverse
Schema (JSON)
pulumiverse/pulumi-scaleway

    The scaleway.object.BucketServerSideEncryptionConfiguration resource allows you to manage server-side encryption configuration for Scaleway Object Storage buckets.

    Refer to the dedicated documentation for more information on server-side encryption.

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as scaleway from "@pulumiverse/scaleway";

const test = new scaleway.object.Bucket("test", {
    name: "my-bucket",
    region: "fr-par",
});
const mykey = new scaleway.keymanager.Key("mykey", {
    name: "my-kms-key",
    description: "This key is used to encrypt bucket objects",
    usage: "asymmetric_encryption",
    algorithm: "rsa_oaep_4096_sha256",
    unprotected: true,
});
const testBucketServerSideEncryptionConfiguration = new scaleway.object.BucketServerSideEncryptionConfiguration("test", {
    bucket: test.name,
    region: "fr-par",
    rules: [{
        applyServerSideEncryptionByDefault: {
            kmsMasterKeyId: mykey.name,
            sseAlgorithm: "aws:kms",
        },
        bucketKeyEnabled: true,
    }],
});

    import pulumi
import pulumiverse_scaleway as scaleway

test = scaleway.object.Bucket("test",
    name="my-bucket",
    region="fr-par")
mykey = scaleway.keymanager.Key("mykey",
    name="my-kms-key",
    description="This key is used to encrypt bucket objects",
    usage="asymmetric_encryption",
    algorithm="rsa_oaep_4096_sha256",
    unprotected=True)
test_bucket_server_side_encryption_configuration = scaleway.object.BucketServerSideEncryptionConfiguration("test",
    bucket=test.name,
    region="fr-par",
    rules=[{
        "apply_server_side_encryption_by_default": {
            "kms_master_key_id": mykey.name,
            "sse_algorithm": "aws:kms",
        },
        "bucket_key_enabled": True,
    }])

    package main

import (
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
	"github.com/pulumiverse/pulumi-scaleway/sdk/go/scaleway/keymanager"
	"github.com/pulumiverse/pulumi-scaleway/sdk/go/scaleway/object"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		test, err := object.NewBucket(ctx, "test", &object.BucketArgs{
			Name:   pulumi.String("my-bucket"),
			Region: pulumi.String("fr-par"),
		})
		if err != nil {
			return err
		}
		mykey, err := keymanager.NewKey(ctx, "mykey", &keymanager.KeyArgs{
			Name:        pulumi.String("my-kms-key"),
			Description: pulumi.String("This key is used to encrypt bucket objects"),
			Usage:       pulumi.String("asymmetric_encryption"),
			Algorithm:   pulumi.String("rsa_oaep_4096_sha256"),
			Unprotected: pulumi.Bool(true),
		})
		if err != nil {
			return err
		}
		_, err = object.NewBucketServerSideEncryptionConfiguration(ctx, "test", &object.BucketServerSideEncryptionConfigurationArgs{
			Bucket: test.Name,
			Region: pulumi.String("fr-par"),
			Rules: object.BucketServerSideEncryptionConfigurationRuleArray{
				&object.BucketServerSideEncryptionConfigurationRuleArgs{
					ApplyServerSideEncryptionByDefault: &object.BucketServerSideEncryptionConfigurationRuleApplyServerSideEncryptionByDefaultArgs{
						KmsMasterKeyId: mykey.Name,
						SseAlgorithm:   pulumi.String("aws:kms"),
					},
					BucketKeyEnabled: pulumi.Bool(true),
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Scaleway = Pulumiverse.Scaleway;

return await Deployment.RunAsync(() => 
{
    var test = new Scaleway.Object.Bucket("test", new()
    {
        Name = "my-bucket",
        Region = "fr-par",
    });

    var mykey = new Scaleway.Keymanager.Key("mykey", new()
    {
        Name = "my-kms-key",
        Description = "This key is used to encrypt bucket objects",
        Usage = "asymmetric_encryption",
        Algorithm = "rsa_oaep_4096_sha256",
        Unprotected = true,
    });

    var testBucketServerSideEncryptionConfiguration = new Scaleway.Object.BucketServerSideEncryptionConfiguration("test", new()
    {
        Bucket = test.Name,
        Region = "fr-par",
        Rules = new[]
        {
            new Scaleway.Object.Inputs.BucketServerSideEncryptionConfigurationRuleArgs
            {
                ApplyServerSideEncryptionByDefault = new Scaleway.Object.Inputs.BucketServerSideEncryptionConfigurationRuleApplyServerSideEncryptionByDefaultArgs
                {
                    KmsMasterKeyId = mykey.Name,
                    SseAlgorithm = "aws:kms",
                },
                BucketKeyEnabled = true,
            },
        },
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.scaleway.object.Bucket;
import com.pulumi.scaleway.object.BucketArgs;
import com.pulumi.scaleway.keymanager.Key;
import com.pulumi.scaleway.keymanager.KeyArgs;
import com.pulumi.scaleway.object.BucketServerSideEncryptionConfiguration;
import com.pulumi.scaleway.object.BucketServerSideEncryptionConfigurationArgs;
import com.pulumi.scaleway.object.inputs.BucketServerSideEncryptionConfigurationRuleArgs;
import com.pulumi.scaleway.object.inputs.BucketServerSideEncryptionConfigurationRuleApplyServerSideEncryptionByDefaultArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var test = new Bucket("test", BucketArgs.builder()
            .name("my-bucket")
            .region("fr-par")
            .build());

        var mykey = new Key("mykey", KeyArgs.builder()
            .name("my-kms-key")
            .description("This key is used to encrypt bucket objects")
            .usage("asymmetric_encryption")
            .algorithm("rsa_oaep_4096_sha256")
            .unprotected(true)
            .build());

        var testBucketServerSideEncryptionConfiguration = new BucketServerSideEncryptionConfiguration("testBucketServerSideEncryptionConfiguration", BucketServerSideEncryptionConfigurationArgs.builder()
            .bucket(test.name())
            .region("fr-par")
            .rules(BucketServerSideEncryptionConfigurationRuleArgs.builder()
                .applyServerSideEncryptionByDefault(BucketServerSideEncryptionConfigurationRuleApplyServerSideEncryptionByDefaultArgs.builder()
                    .kmsMasterKeyId(mykey.name())
                    .sseAlgorithm("aws:kms")
                    .build())
                .bucketKeyEnabled(true)
                .build())
            .build());

    }
}

    resources:
  test:
    type: scaleway:object:Bucket
    properties:
      name: my-bucket
      region: fr-par
  mykey:
    type: scaleway:keymanager:Key
    properties:
      name: my-kms-key
      description: This key is used to encrypt bucket objects
      usage: asymmetric_encryption
      algorithm: rsa_oaep_4096_sha256
      unprotected: 'true'
  testBucketServerSideEncryptionConfiguration:
    type: scaleway:object:BucketServerSideEncryptionConfiguration
    name: test
    properties:
      bucket: ${test.name}
      region: fr-par
      rules:
        - applyServerSideEncryptionByDefault:
            kmsMasterKeyId: ${mykey.name}
            sseAlgorithm: aws:kms
          bucketKeyEnabled: true

    Example coming soon!

    import * as pulumi from "@pulumi/pulumi";
import * as scaleway from "@pulumiverse/scaleway";

const test = new scaleway.object.Bucket("test", {
    name: "my-bucket",
    region: "fr-par",
});
const testBucketServerSideEncryptionConfiguration = new scaleway.object.BucketServerSideEncryptionConfiguration("test", {
    bucket: test.name,
    region: "fr-par",
    rules: [{
        applyServerSideEncryptionByDefault: {
            kmsMasterKeyId: "my-key-id",
            sseAlgorithm: "aws:kms",
        },
        bucketKeyEnabled: true,
    }],
});

    import pulumi
import pulumiverse_scaleway as scaleway

test = scaleway.object.Bucket("test",
    name="my-bucket",
    region="fr-par")
test_bucket_server_side_encryption_configuration = scaleway.object.BucketServerSideEncryptionConfiguration("test",
    bucket=test.name,
    region="fr-par",
    rules=[{
        "apply_server_side_encryption_by_default": {
            "kms_master_key_id": "my-key-id",
            "sse_algorithm": "aws:kms",
        },
        "bucket_key_enabled": True,
    }])

    package main

import (
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
	"github.com/pulumiverse/pulumi-scaleway/sdk/go/scaleway/object"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		test, err := object.NewBucket(ctx, "test", &object.BucketArgs{
			Name:   pulumi.String("my-bucket"),
			Region: pulumi.String("fr-par"),
		})
		if err != nil {
			return err
		}
		_, err = object.NewBucketServerSideEncryptionConfiguration(ctx, "test", &object.BucketServerSideEncryptionConfigurationArgs{
			Bucket: test.Name,
			Region: pulumi.String("fr-par"),
			Rules: object.BucketServerSideEncryptionConfigurationRuleArray{
				&object.BucketServerSideEncryptionConfigurationRuleArgs{
					ApplyServerSideEncryptionByDefault: &object.BucketServerSideEncryptionConfigurationRuleApplyServerSideEncryptionByDefaultArgs{
						KmsMasterKeyId: pulumi.String("my-key-id"),
						SseAlgorithm:   pulumi.String("aws:kms"),
					},
					BucketKeyEnabled: pulumi.Bool(true),
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Scaleway = Pulumiverse.Scaleway;

return await Deployment.RunAsync(() => 
{
    var test = new Scaleway.Object.Bucket("test", new()
    {
        Name = "my-bucket",
        Region = "fr-par",
    });

    var testBucketServerSideEncryptionConfiguration = new Scaleway.Object.BucketServerSideEncryptionConfiguration("test", new()
    {
        Bucket = test.Name,
        Region = "fr-par",
        Rules = new[]
        {
            new Scaleway.Object.Inputs.BucketServerSideEncryptionConfigurationRuleArgs
            {
                ApplyServerSideEncryptionByDefault = new Scaleway.Object.Inputs.BucketServerSideEncryptionConfigurationRuleApplyServerSideEncryptionByDefaultArgs
                {
                    KmsMasterKeyId = "my-key-id",
                    SseAlgorithm = "aws:kms",
                },
                BucketKeyEnabled = true,
            },
        },
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.scaleway.object.Bucket;
import com.pulumi.scaleway.object.BucketArgs;
import com.pulumi.scaleway.object.BucketServerSideEncryptionConfiguration;
import com.pulumi.scaleway.object.BucketServerSideEncryptionConfigurationArgs;
import com.pulumi.scaleway.object.inputs.BucketServerSideEncryptionConfigurationRuleArgs;
import com.pulumi.scaleway.object.inputs.BucketServerSideEncryptionConfigurationRuleApplyServerSideEncryptionByDefaultArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var test = new Bucket("test", BucketArgs.builder()
            .name("my-bucket")
            .region("fr-par")
            .build());

        var testBucketServerSideEncryptionConfiguration = new BucketServerSideEncryptionConfiguration("testBucketServerSideEncryptionConfiguration", BucketServerSideEncryptionConfigurationArgs.builder()
            .bucket(test.name())
            .region("fr-par")
            .rules(BucketServerSideEncryptionConfigurationRuleArgs.builder()
                .applyServerSideEncryptionByDefault(BucketServerSideEncryptionConfigurationRuleApplyServerSideEncryptionByDefaultArgs.builder()
                    .kmsMasterKeyId("my-key-id")
                    .sseAlgorithm("aws:kms")
                    .build())
                .bucketKeyEnabled(true)
                .build())
            .build());

    }
}

    resources:
  test:
    type: scaleway:object:Bucket
    properties:
      name: my-bucket
      region: fr-par
  testBucketServerSideEncryptionConfiguration:
    type: scaleway:object:BucketServerSideEncryptionConfiguration
    name: test
    properties:
      bucket: ${test.name}
      region: fr-par
      rules:
        - applyServerSideEncryptionByDefault:
            kmsMasterKeyId: my-key-id
            sseAlgorithm: aws:kms
          bucketKeyEnabled: true

    Example coming soon!

    import * as pulumi from "@pulumi/pulumi";
import * as scaleway from "@pulumiverse/scaleway";

const test = new scaleway.object.Bucket("test", {
    name: "my-unique-bucket-name",
    region: "fr-par",
});
const testBucketServerSideEncryptionConfiguration = new scaleway.object.BucketServerSideEncryptionConfiguration("test", {
    bucket: test.name,
    region: "fr-par",
    rules: [{
        applyServerSideEncryptionByDefault: {
            sseAlgorithm: "AES256",
        },
    }],
});

    import pulumi
import pulumiverse_scaleway as scaleway

test = scaleway.object.Bucket("test",
    name="my-unique-bucket-name",
    region="fr-par")
test_bucket_server_side_encryption_configuration = scaleway.object.BucketServerSideEncryptionConfiguration("test",
    bucket=test.name,
    region="fr-par",
    rules=[{
        "apply_server_side_encryption_by_default": {
            "sse_algorithm": "AES256",
        },
    }])

    package main

import (
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
	"github.com/pulumiverse/pulumi-scaleway/sdk/go/scaleway/object"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		test, err := object.NewBucket(ctx, "test", &object.BucketArgs{
			Name:   pulumi.String("my-unique-bucket-name"),
			Region: pulumi.String("fr-par"),
		})
		if err != nil {
			return err
		}
		_, err = object.NewBucketServerSideEncryptionConfiguration(ctx, "test", &object.BucketServerSideEncryptionConfigurationArgs{
			Bucket: test.Name,
			Region: pulumi.String("fr-par"),
			Rules: object.BucketServerSideEncryptionConfigurationRuleArray{
				&object.BucketServerSideEncryptionConfigurationRuleArgs{
					ApplyServerSideEncryptionByDefault: &object.BucketServerSideEncryptionConfigurationRuleApplyServerSideEncryptionByDefaultArgs{
						SseAlgorithm: pulumi.String("AES256"),
					},
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Scaleway = Pulumiverse.Scaleway;

return await Deployment.RunAsync(() => 
{
    var test = new Scaleway.Object.Bucket("test", new()
    {
        Name = "my-unique-bucket-name",
        Region = "fr-par",
    });

    var testBucketServerSideEncryptionConfiguration = new Scaleway.Object.BucketServerSideEncryptionConfiguration("test", new()
    {
        Bucket = test.Name,
        Region = "fr-par",
        Rules = new[]
        {
            new Scaleway.Object.Inputs.BucketServerSideEncryptionConfigurationRuleArgs
            {
                ApplyServerSideEncryptionByDefault = new Scaleway.Object.Inputs.BucketServerSideEncryptionConfigurationRuleApplyServerSideEncryptionByDefaultArgs
                {
                    SseAlgorithm = "AES256",
                },
            },
        },
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.scaleway.object.Bucket;
import com.pulumi.scaleway.object.BucketArgs;
import com.pulumi.scaleway.object.BucketServerSideEncryptionConfiguration;
import com.pulumi.scaleway.object.BucketServerSideEncryptionConfigurationArgs;
import com.pulumi.scaleway.object.inputs.BucketServerSideEncryptionConfigurationRuleArgs;
import com.pulumi.scaleway.object.inputs.BucketServerSideEncryptionConfigurationRuleApplyServerSideEncryptionByDefaultArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var test = new Bucket("test", BucketArgs.builder()
            .name("my-unique-bucket-name")
            .region("fr-par")
            .build());

        var testBucketServerSideEncryptionConfiguration = new BucketServerSideEncryptionConfiguration("testBucketServerSideEncryptionConfiguration", BucketServerSideEncryptionConfigurationArgs.builder()
            .bucket(test.name())
            .region("fr-par")
            .rules(BucketServerSideEncryptionConfigurationRuleArgs.builder()
                .applyServerSideEncryptionByDefault(BucketServerSideEncryptionConfigurationRuleApplyServerSideEncryptionByDefaultArgs.builder()
                    .sseAlgorithm("AES256")
                    .build())
                .build())
            .build());

    }
}

    resources:
  test:
    type: scaleway:object:Bucket
    properties:
      name: my-unique-bucket-name
      region: fr-par
  testBucketServerSideEncryptionConfiguration:
    type: scaleway:object:BucketServerSideEncryptionConfiguration
    name: test
    properties:
      bucket: ${test.name}
      region: fr-par
      rules:
        - applyServerSideEncryptionByDefault:
            sseAlgorithm: AES256

    Example coming soon!

    import * as pulumi from "@pulumi/pulumi";
import * as scaleway from "@pulumiverse/scaleway";

const test = new scaleway.object.Bucket("test", {name: "my-unique-bucket-name"});
const testBucketServerSideEncryptionConfiguration = new scaleway.object.BucketServerSideEncryptionConfiguration("test", {
    bucket: test.name,
    rules: [{
        applyServerSideEncryptionByDefault: {
            sseAlgorithm: "AES256",
        },
    }],
});

    import pulumi
import pulumiverse_scaleway as scaleway

test = scaleway.object.Bucket("test", name="my-unique-bucket-name")
test_bucket_server_side_encryption_configuration = scaleway.object.BucketServerSideEncryptionConfiguration("test",
    bucket=test.name,
    rules=[{
        "apply_server_side_encryption_by_default": {
            "sse_algorithm": "AES256",
        },
    }])

    package main

import (
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
	"github.com/pulumiverse/pulumi-scaleway/sdk/go/scaleway/object"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		test, err := object.NewBucket(ctx, "test", &object.BucketArgs{
			Name: pulumi.String("my-unique-bucket-name"),
		})
		if err != nil {
			return err
		}
		_, err = object.NewBucketServerSideEncryptionConfiguration(ctx, "test", &object.BucketServerSideEncryptionConfigurationArgs{
			Bucket: test.Name,
			Rules: object.BucketServerSideEncryptionConfigurationRuleArray{
				&object.BucketServerSideEncryptionConfigurationRuleArgs{
					ApplyServerSideEncryptionByDefault: &object.BucketServerSideEncryptionConfigurationRuleApplyServerSideEncryptionByDefaultArgs{
						SseAlgorithm: pulumi.String("AES256"),
					},
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Scaleway = Pulumiverse.Scaleway;

return await Deployment.RunAsync(() => 
{
    var test = new Scaleway.Object.Bucket("test", new()
    {
        Name = "my-unique-bucket-name",
    });

    var testBucketServerSideEncryptionConfiguration = new Scaleway.Object.BucketServerSideEncryptionConfiguration("test", new()
    {
        Bucket = test.Name,
        Rules = new[]
        {
            new Scaleway.Object.Inputs.BucketServerSideEncryptionConfigurationRuleArgs
            {
                ApplyServerSideEncryptionByDefault = new Scaleway.Object.Inputs.BucketServerSideEncryptionConfigurationRuleApplyServerSideEncryptionByDefaultArgs
                {
                    SseAlgorithm = "AES256",
                },
            },
        },
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.scaleway.object.Bucket;
import com.pulumi.scaleway.object.BucketArgs;
import com.pulumi.scaleway.object.BucketServerSideEncryptionConfiguration;
import com.pulumi.scaleway.object.BucketServerSideEncryptionConfigurationArgs;
import com.pulumi.scaleway.object.inputs.BucketServerSideEncryptionConfigurationRuleArgs;
import com.pulumi.scaleway.object.inputs.BucketServerSideEncryptionConfigurationRuleApplyServerSideEncryptionByDefaultArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var test = new Bucket("test", BucketArgs.builder()
            .name("my-unique-bucket-name")
            .build());

        var testBucketServerSideEncryptionConfiguration = new BucketServerSideEncryptionConfiguration("testBucketServerSideEncryptionConfiguration", BucketServerSideEncryptionConfigurationArgs.builder()
            .bucket(test.name())
            .rules(BucketServerSideEncryptionConfigurationRuleArgs.builder()
                .applyServerSideEncryptionByDefault(BucketServerSideEncryptionConfigurationRuleApplyServerSideEncryptionByDefaultArgs.builder()
                    .sseAlgorithm("AES256")
                    .build())
                .build())
            .build());

    }
}

    resources:
  test:
    type: scaleway:object:Bucket
    properties:
      name: my-unique-bucket-name
  testBucketServerSideEncryptionConfiguration:
    type: scaleway:object:BucketServerSideEncryptionConfiguration
    name: test
    properties:
      bucket: ${test.name}
      rules:
        - applyServerSideEncryptionByDefault:
            sseAlgorithm: AES256

    Example coming soon!

    Create BucketServerSideEncryptionConfiguration Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new BucketServerSideEncryptionConfiguration(name: string, args: BucketServerSideEncryptionConfigurationArgs, opts?: CustomResourceOptions);
    @overload
def BucketServerSideEncryptionConfiguration(resource_name: str,
                                            args: BucketServerSideEncryptionConfigurationArgs,
                                            opts: Optional[ResourceOptions] = None)

@overload
def BucketServerSideEncryptionConfiguration(resource_name: str,
                                            opts: Optional[ResourceOptions] = None,
                                            bucket: Optional[str] = None,
                                            rules: Optional[Sequence[BucketServerSideEncryptionConfigurationRuleArgs]] = None,
                                            region: Optional[str] = None)
    func NewBucketServerSideEncryptionConfiguration(ctx *Context, name string, args BucketServerSideEncryptionConfigurationArgs, opts ...ResourceOption) (*BucketServerSideEncryptionConfiguration, error)
    public BucketServerSideEncryptionConfiguration(string name, BucketServerSideEncryptionConfigurationArgs args, CustomResourceOptions? opts = null)
    public BucketServerSideEncryptionConfiguration(String name, BucketServerSideEncryptionConfigurationArgs args)
public BucketServerSideEncryptionConfiguration(String name, BucketServerSideEncryptionConfigurationArgs args, CustomResourceOptions options)

    type: scaleway:object:BucketServerSideEncryptionConfiguration
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.


    resource "scaleway_object_bucketserversideencryptionconfiguration" "name" {
    # resource properties
}

    Parameters

    name string
    The unique name of the resource.
    args BucketServerSideEncryptionConfigurationArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args BucketServerSideEncryptionConfigurationArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args BucketServerSideEncryptionConfigurationArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args BucketServerSideEncryptionConfigurationArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args BucketServerSideEncryptionConfigurationArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var bucketServerSideEncryptionConfigurationResource = new Scaleway.Object.BucketServerSideEncryptionConfiguration("bucketServerSideEncryptionConfigurationResource", new()
{
    Bucket = "string",
    Rules = new[]
    {
        new Scaleway.Object.Inputs.BucketServerSideEncryptionConfigurationRuleArgs
        {
            ApplyServerSideEncryptionByDefault = new Scaleway.Object.Inputs.BucketServerSideEncryptionConfigurationRuleApplyServerSideEncryptionByDefaultArgs
            {
                SseAlgorithm = "string",
                KmsMasterKeyId = "string",
            },
            BucketKeyEnabled = false,
        },
    },
    Region = "string",
});

    example, err := object.NewBucketServerSideEncryptionConfiguration(ctx, "bucketServerSideEncryptionConfigurationResource", &object.BucketServerSideEncryptionConfigurationArgs{
	Bucket: pulumi.String("string"),
	Rules: object.BucketServerSideEncryptionConfigurationRuleArray{
		&object.BucketServerSideEncryptionConfigurationRuleArgs{
			ApplyServerSideEncryptionByDefault: &object.BucketServerSideEncryptionConfigurationRuleApplyServerSideEncryptionByDefaultArgs{
				SseAlgorithm:   pulumi.String("string"),
				KmsMasterKeyId: pulumi.String("string"),
			},
			BucketKeyEnabled: pulumi.Bool(false),
		},
	},
	Region: pulumi.String("string"),
})

    resource "scaleway_object_bucketserversideencryptionconfiguration" "bucketServerSideEncryptionConfigurationResource" {
  bucket = "string"
  rules {
    apply_server_side_encryption_by_default = {
      sse_algorithm     = "string"
      kms_master_key_id = "string"
    }
    bucket_key_enabled = false
  }
  region = "string"
}

    var bucketServerSideEncryptionConfigurationResource = new BucketServerSideEncryptionConfiguration("bucketServerSideEncryptionConfigurationResource", BucketServerSideEncryptionConfigurationArgs.builder()
    .bucket("string")
    .rules(BucketServerSideEncryptionConfigurationRuleArgs.builder()
        .applyServerSideEncryptionByDefault(BucketServerSideEncryptionConfigurationRuleApplyServerSideEncryptionByDefaultArgs.builder()
            .sseAlgorithm("string")
            .kmsMasterKeyId("string")
            .build())
        .bucketKeyEnabled(false)
        .build())
    .region("string")
    .build());

    bucket_server_side_encryption_configuration_resource = scaleway.object.BucketServerSideEncryptionConfiguration("bucketServerSideEncryptionConfigurationResource",
    bucket="string",
    rules=[{
        "apply_server_side_encryption_by_default": {
            "sse_algorithm": "string",
            "kms_master_key_id": "string",
        },
        "bucket_key_enabled": False,
    }],
    region="string")

    const bucketServerSideEncryptionConfigurationResource = new scaleway.object.BucketServerSideEncryptionConfiguration("bucketServerSideEncryptionConfigurationResource", {
    bucket: "string",
    rules: [{
        applyServerSideEncryptionByDefault: {
            sseAlgorithm: "string",
            kmsMasterKeyId: "string",
        },
        bucketKeyEnabled: false,
    }],
    region: "string",
});

    type: scaleway:object:BucketServerSideEncryptionConfiguration
properties:
    bucket: string
    region: string
    rules:
        - applyServerSideEncryptionByDefault:
            kmsMasterKeyId: string
            sseAlgorithm: string
          bucketKeyEnabled: false

    BucketServerSideEncryptionConfiguration Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The BucketServerSideEncryptionConfiguration resource accepts the following input properties:

    Bucket string
    The bucket's name or regional ID.
    Rules List<Pulumiverse.Scaleway.Object.Inputs.BucketServerSideEncryptionConfigurationRule>
    Set of server-side encryption configuration rules
    Region string
    The region in which the bucket is located.
    Bucket string
    The bucket's name or regional ID.
    Rules []BucketServerSideEncryptionConfigurationRuleArgs
    Set of server-side encryption configuration rules
    Region string
    The region in which the bucket is located.
    bucket string
    The bucket's name or regional ID.
    rules list(object)
    Set of server-side encryption configuration rules
    region string
    The region in which the bucket is located.
    bucket String
    The bucket's name or regional ID.
    rules List<BucketServerSideEncryptionConfigurationRule>
    Set of server-side encryption configuration rules
    region String
    The region in which the bucket is located.
    bucket string
    The bucket's name or regional ID.
    rules BucketServerSideEncryptionConfigurationRule[]
    Set of server-side encryption configuration rules
    region string
    The region in which the bucket is located.
    bucket str
    The bucket's name or regional ID.
    rules Sequence[BucketServerSideEncryptionConfigurationRuleArgs]
    Set of server-side encryption configuration rules
    region str
    The region in which the bucket is located.
    bucket String
    The bucket's name or regional ID.
    rules List<Property Map>
    Set of server-side encryption configuration rules
    region String
    The region in which the bucket is located.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the BucketServerSideEncryptionConfiguration resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Id string
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id str
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.

    Look up Existing BucketServerSideEncryptionConfiguration Resource

    Get an existing BucketServerSideEncryptionConfiguration resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: BucketServerSideEncryptionConfigurationState, opts?: CustomResourceOptions): BucketServerSideEncryptionConfiguration
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        bucket: Optional[str] = None,
        region: Optional[str] = None,
        rules: Optional[Sequence[BucketServerSideEncryptionConfigurationRuleArgs]] = None) -> BucketServerSideEncryptionConfiguration
    func GetBucketServerSideEncryptionConfiguration(ctx *Context, name string, id IDInput, state *BucketServerSideEncryptionConfigurationState, opts ...ResourceOption) (*BucketServerSideEncryptionConfiguration, error)
    public static BucketServerSideEncryptionConfiguration Get(string name, Input<string> id, BucketServerSideEncryptionConfigurationState? state, CustomResourceOptions? opts = null)
    public static BucketServerSideEncryptionConfiguration get(String name, Output<String> id, BucketServerSideEncryptionConfigurationState state, CustomResourceOptions options)
    resources:  _:    type: scaleway:object:BucketServerSideEncryptionConfiguration    get:      id: ${id}
    import {
  to = scaleway_object_bucketserversideencryptionconfiguration.example
  id = "${id}"
}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    Bucket string
    The bucket's name or regional ID.
    Region string
    The region in which the bucket is located.
    Rules List<Pulumiverse.Scaleway.Object.Inputs.BucketServerSideEncryptionConfigurationRule>
    Set of server-side encryption configuration rules
    Bucket string
    The bucket's name or regional ID.
    Region string
    The region in which the bucket is located.
    Rules []BucketServerSideEncryptionConfigurationRuleArgs
    Set of server-side encryption configuration rules
    bucket string
    The bucket's name or regional ID.
    region string
    The region in which the bucket is located.
    rules list(object)
    Set of server-side encryption configuration rules
    bucket String
    The bucket's name or regional ID.
    region String
    The region in which the bucket is located.
    rules List<BucketServerSideEncryptionConfigurationRule>
    Set of server-side encryption configuration rules
    bucket string
    The bucket's name or regional ID.
    region string
    The region in which the bucket is located.
    rules BucketServerSideEncryptionConfigurationRule[]
    Set of server-side encryption configuration rules
    bucket str
    The bucket's name or regional ID.
    region str
    The region in which the bucket is located.
    rules Sequence[BucketServerSideEncryptionConfigurationRuleArgs]
    Set of server-side encryption configuration rules
    bucket String
    The bucket's name or regional ID.
    region String
    The region in which the bucket is located.
    rules List<Property Map>
    Set of server-side encryption configuration rules

    Supporting Types

    BucketServerSideEncryptionConfigurationRule, BucketServerSideEncryptionConfigurationRuleArgs

    ApplyServerSideEncryptionByDefault Pulumiverse.Scaleway.Object.Inputs.BucketServerSideEncryptionConfigurationRuleApplyServerSideEncryptionByDefault
    Single object for setting server-side encryption by default.
    BucketKeyEnabled bool
    Whether or not to use Scaleway Object Bucket Keys for SSE-KMS.
    ApplyServerSideEncryptionByDefault BucketServerSideEncryptionConfigurationRuleApplyServerSideEncryptionByDefault
    Single object for setting server-side encryption by default.
    BucketKeyEnabled bool
    Whether or not to use Scaleway Object Bucket Keys for SSE-KMS.
    apply_server_side_encryption_by_default object
    Single object for setting server-side encryption by default.
    bucket_key_enabled bool
    Whether or not to use Scaleway Object Bucket Keys for SSE-KMS.
    applyServerSideEncryptionByDefault BucketServerSideEncryptionConfigurationRuleApplyServerSideEncryptionByDefault
    Single object for setting server-side encryption by default.
    bucketKeyEnabled Boolean
    Whether or not to use Scaleway Object Bucket Keys for SSE-KMS.
    applyServerSideEncryptionByDefault BucketServerSideEncryptionConfigurationRuleApplyServerSideEncryptionByDefault
    Single object for setting server-side encryption by default.
    bucketKeyEnabled boolean
    Whether or not to use Scaleway Object Bucket Keys for SSE-KMS.
    apply_server_side_encryption_by_default BucketServerSideEncryptionConfigurationRuleApplyServerSideEncryptionByDefault
    Single object for setting server-side encryption by default.
    bucket_key_enabled bool
    Whether or not to use Scaleway Object Bucket Keys for SSE-KMS.
    applyServerSideEncryptionByDefault Property Map
    Single object for setting server-side encryption by default.
    bucketKeyEnabled Boolean
    Whether or not to use Scaleway Object Bucket Keys for SSE-KMS.

    BucketServerSideEncryptionConfigurationRuleApplyServerSideEncryptionByDefault, BucketServerSideEncryptionConfigurationRuleApplyServerSideEncryptionByDefaultArgs

    SseAlgorithm string
    Server-side encryption algorithm to use. Valid values are AES256.
    KmsMasterKeyId string
    Scaleway KMS master key ID used for the SSE-KMS encryption. This can only be used when you set the value of sseAlgorithm as aws:kms. Will return an error if not this element is absent while the sseAlgorithm is aws:kms.
    SseAlgorithm string
    Server-side encryption algorithm to use. Valid values are AES256.
    KmsMasterKeyId string
    Scaleway KMS master key ID used for the SSE-KMS encryption. This can only be used when you set the value of sseAlgorithm as aws:kms. Will return an error if not this element is absent while the sseAlgorithm is aws:kms.
    sse_algorithm string
    Server-side encryption algorithm to use. Valid values are AES256.
    kms_master_key_id string
    Scaleway KMS master key ID used for the SSE-KMS encryption. This can only be used when you set the value of sseAlgorithm as aws:kms. Will return an error if not this element is absent while the sseAlgorithm is aws:kms.
    sseAlgorithm String
    Server-side encryption algorithm to use. Valid values are AES256.
    kmsMasterKeyId String
    Scaleway KMS master key ID used for the SSE-KMS encryption. This can only be used when you set the value of sseAlgorithm as aws:kms. Will return an error if not this element is absent while the sseAlgorithm is aws:kms.
    sseAlgorithm string
    Server-side encryption algorithm to use. Valid values are AES256.
    kmsMasterKeyId string
    Scaleway KMS master key ID used for the SSE-KMS encryption. This can only be used when you set the value of sseAlgorithm as aws:kms. Will return an error if not this element is absent while the sseAlgorithm is aws:kms.
    sse_algorithm str
    Server-side encryption algorithm to use. Valid values are AES256.
    kms_master_key_id str
    Scaleway KMS master key ID used for the SSE-KMS encryption. This can only be used when you set the value of sseAlgorithm as aws:kms. Will return an error if not this element is absent while the sseAlgorithm is aws:kms.
    sseAlgorithm String
    Server-side encryption algorithm to use. Valid values are AES256.
    kmsMasterKeyId String
    Scaleway KMS master key ID used for the SSE-KMS encryption. This can only be used when you set the value of sseAlgorithm as aws:kms. Will return an error if not this element is absent while the sseAlgorithm is aws:kms.

    Import

    Server-side encryption configurations can be imported using the {region}/{bucketName} identifier, as shown below:

    $ pulumi import scaleway:object/bucketServerSideEncryptionConfiguration:BucketServerSideEncryptionConfiguration test fr-par/my-bucket-name

    Important: The projectId attribute has a particular behavior with S3 products because the S3 API is scoped by project. If you are using a project different from the default one, you have to specify the project ID at the end of the import command.

    $ pulumi import scaleway:object/bucketServerSideEncryptionConfiguration:BucketServerSideEncryptionConfiguration test fr-par/my-bucket-name@11111111-1111-1111-1111-111111111111

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    scaleway pulumiverse/pulumi-scaleway
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the scaleway Terraform Provider.
    scaleway logo
    Viewing docs for Scaleway v1.50.0
    published on Tuesday, Jun 2, 2026 by pulumiverse
    Schema (JSON)
    pulumiverse/pulumi-scaleway

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial