enable S3 Bucket key by default (#872)

DataDog · Nov 25, 2024 · a1b9285 · a1b9285
1 parent f673545
commit a1b9285
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/aws/logs_monitoring/template.yaml b/aws/logs_monitoring/template.yaml
@@ -724,7 +724,8 @@ Resources:
         - !Ref AWS::NoValue
       BucketEncryption:
         ServerSideEncryptionConfiguration:
-          - ServerSideEncryptionByDefault:
+          - BucketKeyEnabled: true 
+            ServerSideEncryptionByDefault:
               SSEAlgorithm: "aws:kms"
       PublicAccessBlockConfiguration:
         BlockPublicAcls: true