download free 30 days trial version buy bucket explorer
Documentation  Download  Purchase  Support  FAQs   Forum   ScreenShots & Demos

Amazon S3 - How to use S3 Server-Side Encryption?

Set/Specify Server-Side Encryption using REST API

When an object is created, uploaded or being copied, you can set server-side encryption on the data or object. To do that, you need to add x-amz-server-side-encryption header to the request. You also need to set the value of the header to the encryption algorithm AES256.

When using Multipart upload API to upload large number of objects, you have to add x-amz-server-side-encryption header to the Initiate Multipart Upload request so as to set or specify server-side encryption.

Below are the REST upload APIs that accept the x-amz-server-side-encryption request header:

  • PUT Object
  • Put Object - Copy
  • POST Object
  • Initiate Multipart Upload

When an object is stored using server-side encryption, the following REST APIs response headers will return the x-amz-server-side-encryption header:

  • PUT Object
  • Put Object - Copy
  • POST Object
  • Initiate Multipart Upload
  • Upload Part
  • Upload Part - Copy
  • Complete Multipart Upload
  • Get Object
  • Head Object

Set/Specify Server-Side Encryption using Bucket Explorer

Bucket Explorer now supports Server Side Encryption (SSE) feature provided by Amazon S3.

How to set server side encryption on Amazon s3 objects using Bucket Explorer?

Steps to set server side encryption on whole S3 objects in the Amazon S3 Bucket:

  1. Start Bucket Explorer and connect with your Amazon S3 Account.
  2. Select any Bucket and click on “Batch Operation” -> “Server Side Encryption” .
  3. Click on “Encrypt” for encryption on Bucket.
  4. After a while, process will start in queue.
  1. After a successful completion of the process, you can see the property of any object by clicking on “Property” button located above the object toolbar.
  2. You can see “Server Side Encryption” in property window as enabled.
  3. When you select “Decrypt” option, property window will show “Server Side Encryption” as disabled.

Steps to set server side encryption on a single S3 object:

  1. Start Bucket Explorer and connect with your Amazon S3 Account.
  2. Select your desired object in the selected Bucket.
  3. Right click on the desired object and select “Server side encryption” .
  4. Click on “Encrypt” for encryption process on object.
  5. Progress bar will start at the bottom-left corner.
  6. After a successful completion of the process, you can see the property of any object by clicking on “Property” button located above object toolbar.
  7. You can see “Server Side Encryption” as enabled in property window.
  8. When you select “Decrypt” option, property window will show “Server Side Encryption” as disabled.

Steps to set server side encryption on multiple S3 objects:

  1. Start Bucket Explorer and connect with your Amazon S3 Account.
  2. Select your desired object in the selected Bucket.
  3. Click on “Batch Operation” -> “Server Side Encryption” in object toolbar.
  4. Click on “Encrypt” for encryption process on object.
  5. After a while, process will start in queue.
  6. After a successful completion of the process, you can see the property of any object by clicking on “Property” button located above object toolbar.
  7. You can see “Server Side Encryption” as enabled in property window.
  8. When you select “Decrypt” option, property window will show “Server Side Encryption” as disabled.