s3 download - Error from AWS: the Object was stored using a form of Server Side encryption

Question

I'm attempting a download of an SSE-S3 encrypted csv object from an S3 bucket and getting the error "Error from AWS: The object was stored using a form of server side encryption.  The correct parameters must be provided to retrieve the object"

The Tool Mastery article https://community.alteryx.com/t5/Alteryx-Designer-Knowledge-Base/Tool-Mastery-Amazon-S3-Upload-and-Download/ta-p/344598  looks at uploads and shows a drop-down for encryption.  It states that the configuration of Downloads is the same.  However in the Downloads connector I don't see this option?  What am I missing here?

Thanks!

Loren

grazitti_sapna · Accepted Answer

Hi @LorenHadley,

It seems that when the Data was uploaded into the S3 bucket, Server Side Encryption was used(it was not set as none) and thus you are getting that error. It is expecting you to provide with the encryption key to retrieve the data.

Amazon S3 manages the encryption as it writes to disks and decryption when you access your objects. Therefore, you don't need to maintain any code to perform data encryption and decryption. The only thing you do is manage the encryption keys you provide.

When you upload an object, Amazon S3 uses the encryption key you provide to apply AES-256 encryption to your data and removes the encryption key from memory. When you retrieve an object, you must provide the same encryption key as part of your request. Amazon S3 first verifies that the encryption key you provided matches and then decrypts the object before returning the object data to you.

Please have a look in the screenshot below. If any of the highlighted options were selected while uploading the data into S3, it would have created an encryption key and Amazon S3 expects you to provide the Same key while downloading the data so that it can be decrypted.

I hope I have been able to provide a clear picture of the issue. For more details please refer to the link given below:

https://docs.aws.amazon.com/AmazonS3/latest/dev/ServerSideEncryptionCustomerKeys.html