{"revision":"c10276e953456835cdbb1f3a60d58ae1980be353","document":{"id":30937,"path":"it-operations-management/itom-cloud-accelerate/cal-aws-s3-get-encryption.md","title":"CAL - AWS S3 Get Encryption subflow","bundle":null,"doc_type":null,"release":"australia","body":"\n# CAL - AWS S3 Get Encryption subflow\n\nSubflow that returns the default encryption configuration for an Amazon Web Services \\(AWS\\) S3 bucket.\n\n## Roles and availability\n\n-   **Subscription requirements**\n\n    To use this subflow in custom flows, you must obtain an Integration Hub Enterprise subscription or an App Engine subscription. For more information, see [Request Integration Hub](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/integrate-applications/request-ih-overview.md).\n\n-   **Role requirements**\n\n    This subflow requires roles granted by delegated development or assigned to the user. For more information, see [User access to Flow Designer](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/build-workflows/user-access-flow-designer.md).\n\n\n## Cloud permission\n\nTo execute this subflow, the caller must have the **s3:GetEncryptionConfiguration** cloud permission.\n\n## Inputs\n\nProvide a value for each input that your subflow needs. To add dynamic values, you can also select data pills using the pill picker.\n\n-   **Bucket Name**\n\n    Data type: **String**\n\n    Name of the AWS S3 bucket.\n\n-   **Credential Alias**\n\n    Data type: **String**\n\n    Credential alias for the AWS credential.\n\n-   **Use Mid**\n\n    Data type: **True/False**\n\n    Selection to indicate whether to use a MID Server to make the outbound calls.\n\n-   **MID Server**\n\n    Data type: **Record**\n\n    MID Server for making the outbound calls.\n\n\n## Outputs\n\nYou can use these outputs as inputs for other subflows.\n\n-   **Is Access Denied**\n\n    Data type: **True/False**\n\n    Server authorization status of the call.\n\n    -   **True**: The server has authorized the call\n    -   **False**: The server didn't authorize the call\n-   **Is Encrypted**\n\n    Data type: **True/False**\n\n    Encryption status of the AWS resource.\n\n-   **Bucket Region**\n\n    Data type: **String**\n\n    Datacenter of the AWS S3 bucket.\n\n-   **KMS Masterkey Id**\n\n    Data type: **String**\n\n    Customer AWS Key Management Service \\(KMS\\) key ID used for the default encryption.\n\n-   **Encryption Algorithm**\n\n    Data type: **String**\n\n    Server-side encryption algorithm used for the default encryption.\n\n-   **Bucket Key Enabled**\n\n    Data type: **String**\n\n    Specifies whether Amazon S3 uses an S3 Bucket Key with server-side encryption using KMS \\(SSE-KMS\\) for new objects in the bucket.\n\n-   **Error Code**\n\n    Data type: **String**\n\n    Client error code returned for the failed call.\n\n\n**Parent Topic:**[Cloud Action Library reference](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/it-operations-management/itom-cloud-accelerate/cloud-action-library-reference.md)\n\n"}}