Skip to main content
This is currently supported only for buckets located in the US. On non-US buckets the SSE-C headers are silently ignored: the object is stored unencrypted and can be retrieved without the key.
We support SSE-C. Here is an example on how to PutObject with encryption.

​
PutObject with SSE-C

Don’t forget to update --sse-customer-key here.
user@host ~ % aws s3api put-object --body /path/to/file.png --bucket mybestbucket --key objenc --sse-customer-algorithm AES256 --sse-customer-key XXX
{
    "ETag": "\"18830c2cf6204ca111864bf967c40959\"",
    "SSECustomerAlgorithm": "AES256",
    "SSECustomerKeyMD5": "YYY"
}