From c4e97d23107ec0194aa04ff37cede693b1ca4a1d Mon Sep 17 00:00:00 2001
From: Stephen Randolph <str@amazon.com>
Date: Mon, 18 Sep 2023 14:52:06 -0500
Subject: [PATCH] S3 Best Practices

---
 0_cloudformation/dataCollector.yaml | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/0_cloudformation/dataCollector.yaml b/0_cloudformation/dataCollector.yaml
index 210bedc..a0c5d43 100644
--- a/0_cloudformation/dataCollector.yaml
+++ b/0_cloudformation/dataCollector.yaml
@@ -55,6 +55,13 @@ Resources:
     Type: AWS::S3::Bucket
     Properties:
       BucketName: !Ref DataBucketName
+      VersioningConfiguration:
+        Status: Enabled
+      BucketEncryption:
+        ServerSideEncryptionConfiguration:
+          - ServerSideEncryptionByDefault:
+              SSEAlgorithm: 'AES256'
+            BucketKeyEnabled: true
 
   ### AWS GLUE RESOURCES ###
   AWSGlueJobRole: