# BlockedEncryptionType

Encryption types that can be blocked on an S3 bucket.

- Source: [`aws-s3/lib/bucket.ts`](https://github.com/aws/aws-cdk/blob/v2.275.0/packages/aws-cdk-lib/aws-s3/lib/bucket.ts#L3458)
- Type last changed: v2.245.0 · 27 Mar 2026

## Example

```ts
const bucket = new s3.Bucket(this, 'MySsecBlockedBucket', {
  blockedEncryptionTypes: [s3.BlockedEncryptionType.SSE_C],
});
```

## Properties

- `name`: string — The name for this blocked encryption type used in the API.

- `NONE`: [BlockedEncryptionType](/cdk/api/v2/docs/aws-cdk-lib.aws_s3.BlockedEncryptionType.html) (static) — Special value - all encryption types are allowed.

- `SSE_C`: [BlockedEncryptionType](/cdk/api/v2/docs/aws-cdk-lib.aws_s3.BlockedEncryptionType.html) (static) — Server-Side Encryption with customer-provided keys (SSE-C) is blocked.

## Methods

- `custom(name: string): BlockedEncryptionType // chainable` (static) — Use this constructor only if S3 releases a new BlockedEncryptionType that is unknown to CDK.

  Otherwise, use this class's static constants.