---
title: "GET /tables/{tableBucketARN}/{namespace}/{name}/encryption"
method: GET
path: "/tables/{tableBucketARN}/{namespace}/{name}/encryption"
---

# GET /tables/{tableBucketARN}/{namespace}/{name}/encryption

`GET /tables/{tableBucketARN}/{namespace}/{name}/encryption`

Gets the encryption configuration for a table.

Permissions

You must have the `s3tables:GetTableEncryption` permission to use this operation.

## Path parameters

- `tableBucketARN` string, required
- `namespace` string, required
- `name` string, required

## Response `200`

Success

- GetTableEncryptionResponse
  - `encryptionConfiguration` object, required — The encryption configuration for the table.
    - `sseAlgorithm` 'AES256' | 'aws:kms', required — The server-side encryption algorithm to use. Valid values are <code>AES256</code> for S3-managed encryption keys, or <code>aws:kms</code> for Amazon Web Services KMS-managed encryption keys. If you choose SSE-KMS encryption you must grant the S3 Tables maintenance principal access to your KMS key. For more information, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-tables-kms-permissions.html">Permissions requirements for S3 Tables SSE-KMS encryption</a>.
    - `kmsKeyArn` string — The Amazon Resource Name (ARN) of the KMS key to use for encryption. This field is required only when <code>sseAlgorithm</code> is set to <code>aws:kms</code>.

## Other responses

- `480` — InternalServerErrorException
- `481` — ForbiddenException
- `482` — NotFoundException
- `483` — AccessDeniedException
- `484` — TooManyRequestsException
- `485` — BadRequestException

---

[API](https://skmtc.net/aws/apis/s3tables.md) · [All operations](https://skmtc.net/aws/apis/s3tables/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/aws/s3tables/versions/d7413f19d46e/schema)