Class: S3Secure::Encryption::Enable

Inherits:
Base show all
Defined in:
lib/s3_secure/encryption/enable.rb

Instance Method Summary collapse

Methods inherited from AbstractBase

#buckets, #initialize

Methods included from AwsServices

#new_s3_regional_client, #s3_client, #s3_regional_client

Constructor Details

This class inherits a constructor from S3Secure::AbstractBase

Instance Method Details

#rule ⇒ Object 



30
31
32
33
34
35
36
37
38
39
40
 
# File 'lib/s3_secure/encryption/enable.rb', line 30

def rule
  options = if @options[:kms_key] # SSE-KMS
              {
                sse_algorithm: "aws:kms", # required, accepts AES256, aws:kms
                kms_master_key_id: @options[:kms_key], # "SSEKMSKeyId",
              }
            else # SSE-S3
              { sse_algorithm: "AES256" }
            end
  { apply_server_side_encryption_by_default: options }
end

#run ⇒ Object 



3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
 
# File 'lib/s3_secure/encryption/enable.rb', line 3

def run
  @s3 = s3_regional_client(@bucket)

  list = S3Secure::Encryption::List.new(@options)
  list.set_s3(@s3)

  rules = list.get_encryption_rules(@bucket)
  if rules
    # check rules to see if encryption is already set of some sort
    puts "Bucket #{@bucket} already has encryption rules:"
    puts rules.map(&:to_h)
  else
    # Set encryption rules
    # Ruby docs: https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/S3/Client.html#put_bucket_encryption-instance_method
    # API docs: https://docs.aws.amazon.com/AmazonS3/latest/API/API_ServerSideEncryptionByDefault.html
    #
    #    put_bucket_encryption returns #<struct Aws::EmptyStructure>
    #
    @s3.put_bucket_encryption(
      bucket: @bucket,
      server_side_encryption_configuration: {
        rules: [rule]})
    puts "Encyption enabled on bucket #{@bucket} with rules:"
    pp rule
  end
end