(s3): support S3 bucket keys

[hoegertn]

Add property to S3 Bucket to configure bucket-level keys.

https://docs.aws.amazon.com/AmazonS3/latest/dev/configuring-bucket-key.html#enable-bucket-key-cloudformation

• 👋 I may be able to implement this feature request
• ⚠️ This feature might incur a breaking change

---

This is a 🚀 Feature Request

[iliapolo]

@hoegertn Can you please elaborate exactly what you'd like to configure? ideally with a theoretical API?

We already have support for passing an encryption key and the encryption type:

aws-cdk/packages/@aws-cdk/aws-s3/lib/bucket.ts

Line 1001 in 968df97

readonly encryption?: BucketEncryption;

aws-cdk/packages/@aws-cdk/aws-s3/lib/bucket.ts

Line 1013 in 968df97

readonly encryptionKey?: kms.IKey;

Are you referring to the BucketEnabledKey we currently don't support and the ability to configure multiple rules?

[hoegertn]

Exactly, this is meant as a tracking ticket for the newly released BucketEnabledKEy field to enable bucket-level keys for S3

[github-actions]

⚠️COMMENT VISIBILITY WARNING⚠️

Comments on closed issues are hard for our team to see.
If you need more assistance, please either tag a team member or open a new issue that references this one.
If you wish to keep having a conversation with other community members under this issue feel free to do so.