---
sourceDocument: Yokohama IT Operations Management
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/yokohama/it-operations-management

 Release :

    - yokohama

ft:locale :

    - en-US

ft:publication_title :

    - Yokohama IT Operations Management

ft:clusterId :

    - itom

bundleId :

    - itom

workflow :

    - Technology


---

# AWS Put S3 Bucket Encryption action

# AWS Put S3 Bucket Encryption action {#ariaid-title1}

* Release version: Yokohama
* 
* Updated January 30, 2025
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read

Action that configures the default encryption and Amazon Web Services (AWS) S3 Bucket Key for an existing bucket.

## Roles and availability {#cal-aws-put-s3-bucket-encryption__section_izk_rj3_gtb}

Subscription requirements
:   To use this action in custom flows, you must obtain an Integration Hub Enterprise subscription or an App Engine subscription. For more information, see [Request Integration Hub](https://www.servicenow.com/docs/access?context=request-ih-overview&version=yokohama&pubname=yokohama-integrate-applications&ft:locale=en-US).

Role requirements
:   This action requires roles granted by delegated development or assigned to
    the user. For more information, see [User access to Flow
    Designer](https://www.servicenow.com/docs/access?context=user-access-flow-designer&version=yokohama&pubname=yokohama-build-workflows&ft:locale=en-US).

## Cloud permission {#cal-aws-put-s3-bucket-encryption__section_kd2_wzq_jtb}

To execute this action, the caller must have the
s3:PutEncryptionConfiguration cloud permission.

## Inputs {#cal-aws-put-s3-bucket-encryption__section-inputs}

Provide a value for each input that your action needs. To add
dynamic values, you can also select data pills using the pill picker.{#cal-aws-put-s3-bucket-encryption__inputs-description}

Bucket Name
:   Data type: String

    Name of the AWS S3 bucket.

Credential Alias
:   Data type: Record

    Credential alias for the
    AWS credential.

Location
:   Data type: String

    Name of the datacenter.

Use MID
:   Data type: True/False

    Selection to indicate whether to
    use a MID Server to make the outbound
    calls.

MID Server
:   Data type: Record

    MID Server for
    making the outbound calls.

Gov Cloud
:   Data type: True/False

    Not supported.

## Outputs {#cal-aws-put-s3-bucket-encryption__section-outputs}

You can use these outputs as inputs for other
actions.{#cal-aws-put-s3-bucket-encryption__outputs-description}

Is Access Denied
    : Data type: String  
    Server authorization status of the call.

    * True: The server has authorized the call
    * False: The server didn't authorize the call
    {#cal-aws-put-s3-bucket-encryption__ul_p2l_lmr_2tb}

Bucket Region
:   Data type: String

    Datacenter where the
    specified AWS S3 bucket is
    hosted.

Error Code
:   Data type: String

    Client error code returned for
    the failed call.

Result
    : Data type: True/False  
    Status of the action.

    * True: Successful
    * False: Failed
    {#cal-aws-put-s3-bucket-encryption__ul_lxb_4lr_2tb}

Redirected
:   Data type: String

    If the AWS S3 bucket is not
    available in the specified datacenter, the Bucket Region variable specifies the datacenter of
    the AWS S3 bucket.

Error Message
:   Data type: String

    Error message returned for
    the failed call.