Add Server Side Encryption

Author: Seth Pollack

README.md

@@ -195,6 +195,12 @@ The network proxy url used when sending requests to S3.
 
 *Default:* `undefined`
 
+### serverSideEncryption
+
+The Server-side encryption algorithm used when storing this object in S3 (e.g., AES256, aws:kms). Possible values include:
+  - "AES256"
+  - "aws:kms"
+
 ## Prerequisites
 
 The following properties are expected to be present on the deployment `context` object:

index.js

@@ -45,19 +45,20 @@ module.exports = {
       requiredConfig: ['bucket', 'region'],
 
       upload: function(context) {
-        var self         = this;
+        var self                  = this;
 
-        var filePattern   = this.readConfig('filePattern');
-        var distDir       = this.readConfig('distDir');
-        var distFiles     = this.readConfig('distFiles');
-        var gzippedFiles  = this.readConfig('gzippedFiles');
-        var bucket        = this.readConfig('bucket');
-        var acl           = this.readConfig('acl');
-        var prefix        = this.readConfig('prefix');
-        var manifestPath  = this.readConfig('manifestPath');
-        var cacheControl  = this.readConfig('cacheControl');
-        var expires       = this.readConfig('expires');
-        var dotFolders    = this.readConfig('dotFolders');
+        var filePattern           = this.readConfig('filePattern');
+        var distDir               = this.readConfig('distDir');
+        var distFiles             = this.readConfig('distFiles');
+        var gzippedFiles          = this.readConfig('gzippedFiles');
+        var bucket                = this.readConfig('bucket');
+        var acl                   = this.readConfig('acl');
+        var prefix                = this.readConfig('prefix');
+        var manifestPath          = this.readConfig('manifestPath');
+        var cacheControl          = this.readConfig('cacheControl');
+        var expires               = this.readConfig('expires');
+        var dotFolders            = this.readConfig('dotFolders');
+        var serverSideEncryption  = this.readConfig('serverSideEncryption');
 
         var filesToUpload = distFiles.filter(minimatch.filter(filePattern, { matchBase: true, dot: dotFolders }));
 
@@ -77,6 +78,10 @@ module.exports = {
           expires: expires
         };
 
+        if (serverSideEncryption) {
+          options.serverSideEncryption = serverSideEncryption;
+        }
+
         this.log('preparing to upload to S3 bucket `' + bucket + '`', { verbose: true });
 
         return s3.upload(options)

lib/s3.js

@@ -97,14 +97,15 @@ module.exports = CoreObject.extend({
   },
 
   _putObjects: function(filePaths, options) {
-    var plugin           = this._plugin;
-    var cwd              = options.cwd;
-    var bucket           = options.bucket;
-    var prefix           = options.prefix;
-    var acl              = options.acl;
-    var gzippedFilePaths = options.gzippedFilePaths || [];
-    var cacheControl     = options.cacheControl;
-    var expires          = options.expires;
+    var plugin               = this._plugin;
+    var cwd                  = options.cwd;
+    var bucket               = options.bucket;
+    var prefix               = options.prefix;
+    var acl                  = options.acl;
+    var gzippedFilePaths     = options.gzippedFilePaths || [];
+    var cacheControl         = options.cacheControl;
+    var expires              = options.expires;
+    var serverSideEncryption = options.serverSideEncryption;
 
     mime.default_type = options.defaultMimeType || mime.lookup('bin');
 
@@ -138,6 +139,11 @@ module.exports = CoreObject.extend({
         CacheControl: cacheControl,
         Expires: expires
       };
+
+      if (serverSideEncryption) {
+        params.ServerSideEncryption = serverSideEncryption;
+      }
+
       if (isGzipped) {
         params.ContentEncoding = 'gzip';
       }