#!/usr/bin/env python3 import boto3 import sys def is_encrypted(client, bucket_name): encryption_settings = client.get_bucket_encryption(Bucket=bucket_name) rules = encryption_settings.get('ServerSideEncryptionConfiguration').get('Rules') # print(bucket_name, rules) is_enc = True if len(rules) == 0: is_enc = False return is_enc def main(): client = boto3.client('s3') buckets = client.list_buckets().get('Buckets', []) for bucket in buckets: bucket_name = bucket.get('Name') encrypted = is_encrypted(client, bucket_name) if not encrypted: print(f"Bucket {bucket_name} is not encrypted") if __name__ == '__main__': sys.exit(main())