Default encryption

Also written: server-side encryption, put-bucket-encryption

A bucket setting that makes S3 encrypt every new object automatically. Choosing KMS keys adds control over who may use the key, and every use is logged.