/* * Copyright 2018-2023 Amazon.com, Inc. or its affiliates. All Rights Reserved. * * Licensed under the Apache License, Version 2.0 (the "License"). You may not use this file except in compliance with * the License. A copy of the License is located at * * http://aws.amazon.com/apache2.0 * * or in the "license" file accompanying this file. This file is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR * CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions * and limitations under the License. */ package com.amazonaws.services.macie2.model; import java.io.Serializable; import javax.annotation.Generated; import com.amazonaws.protocol.StructuredPojo; import com.amazonaws.protocol.ProtocolMarshaller; /** *
* Provides information about the default server-side encryption settings for an S3 bucket. For detailed information * about these settings, see Setting default server-side * encryption behavior for Amazon S3 buckets in the Amazon Simple Storage Service User Guide. *
* * @see AWS * API Documentation */ @Generated("com.amazonaws:aws-java-sdk-code-generator") public class BucketServerSideEncryption implements Serializable, Cloneable, StructuredPojo { /** ** The Amazon Resource Name (ARN) or unique identifier (key ID) for the KMS key that's used by default to encrypt * objects that are added to the bucket. This value is null if the bucket is configured to use an Amazon S3 managed * key to encrypt new objects. *
*/ private String kmsMasterKeyId; /** ** The server-side encryption algorithm that's used by default to encrypt objects that are added to the bucket. * Possible values are: *
** AES256 - New objects are encrypted with an Amazon S3 managed key. They use SSE-S3 encryption. *
** aws:kms - New objects are encrypted with an KMS key (kmsMasterKeyId), either an Amazon Web Services managed key * or a customer managed key. They use SSE-KMS encryption. *
** NONE - The bucket's default encryption settings don't specify server-side encryption behavior for new objects. *
** The Amazon Resource Name (ARN) or unique identifier (key ID) for the KMS key that's used by default to encrypt * objects that are added to the bucket. This value is null if the bucket is configured to use an Amazon S3 managed * key to encrypt new objects. *
* * @param kmsMasterKeyId * The Amazon Resource Name (ARN) or unique identifier (key ID) for the KMS key that's used by default to * encrypt objects that are added to the bucket. This value is null if the bucket is configured to use an * Amazon S3 managed key to encrypt new objects. */ public void setKmsMasterKeyId(String kmsMasterKeyId) { this.kmsMasterKeyId = kmsMasterKeyId; } /** ** The Amazon Resource Name (ARN) or unique identifier (key ID) for the KMS key that's used by default to encrypt * objects that are added to the bucket. This value is null if the bucket is configured to use an Amazon S3 managed * key to encrypt new objects. *
* * @return The Amazon Resource Name (ARN) or unique identifier (key ID) for the KMS key that's used by default to * encrypt objects that are added to the bucket. This value is null if the bucket is configured to use an * Amazon S3 managed key to encrypt new objects. */ public String getKmsMasterKeyId() { return this.kmsMasterKeyId; } /** ** The Amazon Resource Name (ARN) or unique identifier (key ID) for the KMS key that's used by default to encrypt * objects that are added to the bucket. This value is null if the bucket is configured to use an Amazon S3 managed * key to encrypt new objects. *
* * @param kmsMasterKeyId * The Amazon Resource Name (ARN) or unique identifier (key ID) for the KMS key that's used by default to * encrypt objects that are added to the bucket. This value is null if the bucket is configured to use an * Amazon S3 managed key to encrypt new objects. * @return Returns a reference to this object so that method calls can be chained together. */ public BucketServerSideEncryption withKmsMasterKeyId(String kmsMasterKeyId) { setKmsMasterKeyId(kmsMasterKeyId); return this; } /** ** The server-side encryption algorithm that's used by default to encrypt objects that are added to the bucket. * Possible values are: *
** AES256 - New objects are encrypted with an Amazon S3 managed key. They use SSE-S3 encryption. *
** aws:kms - New objects are encrypted with an KMS key (kmsMasterKeyId), either an Amazon Web Services managed key * or a customer managed key. They use SSE-KMS encryption. *
** NONE - The bucket's default encryption settings don't specify server-side encryption behavior for new objects. *
** AES256 - New objects are encrypted with an Amazon S3 managed key. They use SSE-S3 encryption. *
** aws:kms - New objects are encrypted with an KMS key (kmsMasterKeyId), either an Amazon Web Services * managed key or a customer managed key. They use SSE-KMS encryption. *
** NONE - The bucket's default encryption settings don't specify server-side encryption behavior for new * objects. *
** The server-side encryption algorithm that's used by default to encrypt objects that are added to the bucket. * Possible values are: *
** AES256 - New objects are encrypted with an Amazon S3 managed key. They use SSE-S3 encryption. *
** aws:kms - New objects are encrypted with an KMS key (kmsMasterKeyId), either an Amazon Web Services managed key * or a customer managed key. They use SSE-KMS encryption. *
** NONE - The bucket's default encryption settings don't specify server-side encryption behavior for new objects. *
** AES256 - New objects are encrypted with an Amazon S3 managed key. They use SSE-S3 encryption. *
** aws:kms - New objects are encrypted with an KMS key (kmsMasterKeyId), either an Amazon Web Services * managed key or a customer managed key. They use SSE-KMS encryption. *
** NONE - The bucket's default encryption settings don't specify server-side encryption behavior for new * objects. *
** The server-side encryption algorithm that's used by default to encrypt objects that are added to the bucket. * Possible values are: *
** AES256 - New objects are encrypted with an Amazon S3 managed key. They use SSE-S3 encryption. *
** aws:kms - New objects are encrypted with an KMS key (kmsMasterKeyId), either an Amazon Web Services managed key * or a customer managed key. They use SSE-KMS encryption. *
** NONE - The bucket's default encryption settings don't specify server-side encryption behavior for new objects. *
** AES256 - New objects are encrypted with an Amazon S3 managed key. They use SSE-S3 encryption. *
** aws:kms - New objects are encrypted with an KMS key (kmsMasterKeyId), either an Amazon Web Services * managed key or a customer managed key. They use SSE-KMS encryption. *
** NONE - The bucket's default encryption settings don't specify server-side encryption behavior for new * objects. *
** The server-side encryption algorithm that's used by default to encrypt objects that are added to the bucket. * Possible values are: *
** AES256 - New objects are encrypted with an Amazon S3 managed key. They use SSE-S3 encryption. *
** aws:kms - New objects are encrypted with an KMS key (kmsMasterKeyId), either an Amazon Web Services managed key * or a customer managed key. They use SSE-KMS encryption. *
** NONE - The bucket's default encryption settings don't specify server-side encryption behavior for new objects. *
** AES256 - New objects are encrypted with an Amazon S3 managed key. They use SSE-S3 encryption. *
** aws:kms - New objects are encrypted with an KMS key (kmsMasterKeyId), either an Amazon Web Services * managed key or a customer managed key. They use SSE-KMS encryption. *
** NONE - The bucket's default encryption settings don't specify server-side encryption behavior for new * objects. *
*