{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://raw.githubusercontent.com/api-evangelist/argo-workflows/refs/heads/main/json-schema/argo-workflows-io-argoproj-workflow-v1alpha1-s3-encryption-options-schema.json",
  "title": "io.argoproj.workflow.v1alpha1.S3EncryptionOptions",
  "description": "S3EncryptionOptions used to determine encryption options during s3 operations",
  "type": "object",
  "properties": {
    "enableEncryption": {
      "description": "EnableEncryption tells the driver to encrypt objects if set to true. If kmsKeyId and serverSideCustomerKeySecret are not set, SSE-S3 will be used",
      "type": "boolean"
    },
    "kmsEncryptionContext": {
      "description": "KmsEncryptionContext is a json blob that contains an encryption context. See https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#encrypt_context for more information",
      "type": "string"
    },
    "kmsKeyId": {
      "description": "KMSKeyId tells the driver to encrypt the object using the specified KMS Key.",
      "type": "string"
    },
    "serverSideCustomerKeySecret": {
      "description": "ServerSideCustomerKeySecret tells the driver to encrypt the output artifacts using SSE-C with the specified secret.",
      "$ref": "#/definitions/io.k8s.api.core.v1.SecretKeySelector"
    }
  }
}