From d86e015eb2853c96363b8dde02df1e1cf438cae9 Mon Sep 17 00:00:00 2001
From: Yuki Watanabe <yuki.watanabe@japan-d2.com>
Date: Thu, 3 Mar 2022 10:55:50 +0900
Subject: [PATCH] enable bucket key

---
 s3/standard-bucket.yaml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/s3/standard-bucket.yaml b/s3/standard-bucket.yaml
index 26b495d..b3e6b80 100644
--- a/s3/standard-bucket.yaml
+++ b/s3/standard-bucket.yaml
@@ -71,6 +71,7 @@ Resources:
           - ServerSideEncryptionByDefault:
               KMSMasterKeyID: !If [CreateStandardKMSKey, !GetAtt StandardEncryptionKey.Arn, !Ref KmsKeyArn]
               SSEAlgorithm: aws:kms
+            BucketKeyEnabled: true
       BucketName: !Ref BucketName
       LifecycleConfiguration:
         Fn::If: