S3 BucketEncryption Property

Does anyone know how to properly set the variable BucketEncryption for the S3 resource?

Currently I have:

from troposphere import Output, Ref, Join, GetAtt
from troposphere.s3 import Bucket, BucketEncryption, ServerSideEncryptionRule, ServerSideEncryptionByDefault

import troposphere

t = troposphere.Template()

t.add_description("default description")

s3loggingbucket = t.add_resource(
    troposphere.s3.Bucket(
        "01loggingbucket",
        BucketEncryption = "AES256",
    ))

print(t.to_json())

I get the error message TypeError: <class 'troposphere.s3.Bucket'>: 01loggingbucket.BucketEncryption is <type 'str'>, expected <class 'troposphere.s3.BucketEncryption'>

Does anyone know what the proper value is for BucketEncryption?

[danehrlich1]

With a usable variable for SSEAlgorithm put in and KMSMasterKeyID deleted. So this does “SSE-S3” style encryption where the keys are stored in S3.

t.add_resource(s3.Bucket(
    'MyBucket',
    BucketEncryption=s3.BucketEncryption(
        ServerSideEncryptionConfiguration=[
            s3.ServerSideEncryptionRule(
                ServerSideEncryptionByDefault=s3.ServerSideEncryptionByDefault(
                    SSEAlgorithm='AES256'
                )
            )
        ]
    ),
))

[trainguyenx]

Thank you guys.