diff --git a/s3.tf b/s3.tf
index c7fcb3b..3d4ec5d 100644
--- a/s3.tf
+++ b/s3.tf
@@ -19,6 +19,13 @@ resource "aws_s3_bucket" "data" {
     git_repo             = "terragoat"
     yor_trace            = "0874007d-903a-4b4c-945f-c9c233e13243"
   })
+  server_side_encryption_configuration {
+    rule {
+      apply_server_side_encryption_by_default {
+        sse_algorithm = "AES256"
+      }
+    }
+  }
 }
 
 resource "aws_s3_bucket_object" "data_object" {