Python script to encrypt all existing objects in an S3 bucket

encrypt_all_objects.py

#!/usr/bin/env python

# set SSE on all existing objects

#usage: encrypt_all_objects.py bucketname

import sys
import boto

from boto import connect_s3
from boto.s3 import connect_to_region
from boto.s3.connection import S3Connection, OrdinaryCallingFormat

bucketname = sys.argv[1]

s3 = connect_to_region(
             'ap-southeast-2',
             is_secure=True,
             calling_format = OrdinaryCallingFormat()
           )

bucket = s3.get_bucket(bucketname)

keys = bucket.list()

for k in keys:
    print(k.key)
    k.copy(bucketname, k.key, encrypt_key=True, preserve_acl=True)