在命令中指定SSE算法和主密钥ID(如果启用了AWS Key Management Service(KMS))来解决此问题。以下是示例代码:
aws s3api put-bucket-encryption --bucket example-bucket --server-side-encryption-configuration '{"Rules": [{"ApplyServerSideEncryptionByDefault": {"SSEAlgorithm": "aws:kms", "KMSMasterKeyID": "arn:aws:kms:us-west-2:111122223333:key/abcd1234-a123-456b-b789-0cd12ef3a456"},"BucketKeyEnabled":true}]}'
请注意,SSEAlgorithm和KMSMasterKeyID必须与您的Bucket策略匹配,否则S3将通过验证BucketKeyEnabled参数失败。
上一篇:AWScliconfigurefailstosetprofilealthoughthe'config'and'credentials'filesaregeneratedat~/home/.aws