aws_s3.CfnBucket "bucket_encryption" required properties not implemented in Python

Hi,

I’m trying to set the default server-side encryption in S3, using the aws_s3.CfnBucket module.

The problem is that if I implement a setting of the type AWS::S3::Bucket.BucketEncryption in the bucket_encryption parameter (as stated here in the docs), using a value like {"ServerSideEncryptionByDefault": {"SSEAlgorithm": "AES256"}} throws out an error, saying that it expects an object reference.

The problem is that I also tried to use the same object as used in the aws_s3.Bucket Construct (e.g. aws_s3.BucketEncryption.S3_MANAGED), but it is not recognised as well - it seems to me that this reference (@aws-cdk/aws-s3.CfnBucket.BucketEncryptionProperty: serverSideEncryptionConfiguration) is not correctly implemented for Python.

Reproduction Steps

Create a CDK App using Python and add the following code inside the Stack:

bucket = aws_s3.CfnBucket(
    self,
    "bucket",
    bucket_name="my_bucket",
    bucket_encryption={"ServerSideEncryptionByDefault": {"SSEAlgorithm": "AES256"}},
)

Then try to run any CDK command, like cdk ls or cdk synth.

Error Log

When using a direct reference:

jsii.errors.JSIIError: Value did not match any type in union: Expected object reference, got {"ServerSideEncryptionByDefault":{"SSEAlgorithm":"AES256"}},Missing required properties for @aws-cdk/aws-s3.CfnBucket.BucketEncryptionProperty: serverSideEncryptionConfiguration

When using aws_s3.BucketEncryption:

jsii.errors.JSIIError: Value did not match any type in union: Expected object reference, got {"$jsii.enum":"@aws-cdk/aws-s3.BucketEncryption/S3_MANAGED"},Missing required properties for @aws-cdk/aws-s3.CfnBucket.BucketEncryptionProperty: serverSideEncryptionConfiguration

Environment

• CLI Version : 1.15.0 (build bdbe3aa)
• Framework Version: 1.15.0
• OS : MacOS X Mojave
• Language : Python/3.7.5

Other

---

This is 🐛 Bug Report

[eladb]

@eduardohki it should still be possible to use s3.Bucket and only patch the specific properties using escape hatches.

@RomainMuller what would it take to support passing this by-value in Python?

[eladb]

Closing for now. Please reopen if this is still an issue