diff --git a/s3/standard-bucket.yaml b/s3/standard-bucket.yaml
index 26b495d..b3e6b80 100644
--- a/s3/standard-bucket.yaml
+++ b/s3/standard-bucket.yaml
@@ -71,6 +71,7 @@ Resources:
           - ServerSideEncryptionByDefault:
               KMSMasterKeyID: !If [CreateStandardKMSKey, !GetAtt StandardEncryptionKey.Arn, !Ref KmsKeyArn]
               SSEAlgorithm: aws:kms
+            BucketKeyEnabled: true
       BucketName: !Ref BucketName
       LifecycleConfiguration:
         Fn::If: