--- title: "get-bucket-encryption" slug: "get-bucket-encryption" updated: 2026-10-08T04:59:33Z published: 2026-10-08T04:59:33Z canonical: "cli.ncloud-docs.com/get-bucket-encryption" --- > ## Documentation Index > Fetch the complete documentation index at: https://cli.ncloud-docs.com/llms.txt > Use this file to discover all available pages before exploring further. # get-bucket-encryption Available in Classic and VPC Get the default server-side encryption (SSE) settings configured for an Ncloud Storage bucket. If encryption has not been configured separately, the default value, AES256 (SSE-S3), is returned. Note For a Sub Account user to execute this command, they must have the View/GetEncryptionConfiguration action permission. ## Syntax The `get-bucket-encryption` syntax is as follows: ``` aws s3api get-bucket-encryption \ --bucket \ --endpoint-url ``` ## Options This section describes the options available when running `get-bucket-encryption`. ### Required options The following options are required for `get-bucket-encryption`. | Options | Type | Required | Description | | --- | --- | --- | --- | | `--bucket` | String | Required | Bucket name | ### Common options For information about the options common to all `aws` subcommands, see [Ncloud Storage options](/docs/en/storage-ncloudstorage#%EC%98%B5%EC%85%98). ## Examples If the request to retrieve encryption settings is successful, the default encryption configuration information applied to the bucket is returned. ### Command The command example is as follows: ``` aws s3api get-bucket-encryption --bucket my-test-bucket \ --endpoint-url=https://kr.ncloudstorage.com ``` ### Output The output example is as follows: ``` { "ServerSideEncryptionConfiguration": { "Rules": [ { "ApplyServerSideEncryptionByDefault": { "SSEAlgorithm": "AES256" }, "BucketKeyEnabled": false } ] } } ``` ## Related commands Related commands are as follows: - [put-bucket-encryption](/docs/en/put-bucket-encryption) - [delete-bucket-encryption](/docs/en/delete-bucket-encryption)