---
title: "PUT /buckets/{tableBucketARN}/encryption"
method: PUT
path: "/buckets/{tableBucketARN}/encryption"
---

# PUT /buckets/{tableBucketARN}/encryption

`PUT /buckets/{tableBucketARN}/encryption`

Sets the encryption configuration for a table bucket.

Permissions

You must have the `s3tables:PutTableBucketEncryption` permission to use this operation.

If you choose SSE-KMS encryption you must grant the S3 Tables maintenance principal access to your KMS key. For more information, see [Permissions requirements for S3 Tables SSE-KMS encryption](https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-tables-kms-permissions.html) in the _Amazon Simple Storage Service User Guide_.

## Path parameters

- `tableBucketARN` string, required

## Request body

- object
  - `encryptionConfiguration` object, required — Configuration specifying how data should be encrypted. This structure defines the encryption algorithm and optional KMS key to be used for server-side encryption.
    - `sseAlgorithm` 'AES256' | 'aws:kms' — The server-side encryption algorithm to use. Valid values are <code>AES256</code> for S3-managed encryption keys, or <code>aws:kms</code> for Amazon Web Services KMS-managed encryption keys. If you choose SSE-KMS encryption you must grant the S3 Tables maintenance principal access to your KMS key. For more information, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-tables-kms-permissions.html">Permissions requirements for S3 Tables SSE-KMS encryption</a>.
    - `kmsKeyArn` string — The Amazon Resource Name (ARN) of the KMS key to use for encryption. This field is required only when <code>sseAlgorithm</code> is set to <code>aws:kms</code>.

## Response `200`

Success

## Other responses

- `480` — InternalServerErrorException
- `481` — ForbiddenException
- `482` — NotFoundException
- `483` — TooManyRequestsException
- `484` — ConflictException
- `485` — BadRequestException

---

[API](https://skmtc.net/aws/apis/s3tables.md) · [All operations](https://skmtc.net/aws/apis/s3tables/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/aws/s3tables/versions/d7413f19d46e/schema)