f

errors/arsenalErrors.json

@@ -276,6 +276,10 @@
     "code": 404,
     "description": "The object lock configuration was not found"
   },
+  "ServerSideEncryptionConfigurationNotFoundError" : {
+    "code": 404,
+    "description": "The server side encryption configuration was not found"
+  },
   "NotImplemented": {
     "code": 501,
     "description": "A header you provided implies functionality that is not implemented."

lib/policyEvaluator/utils/actionMaps.js

@@ -23,6 +23,7 @@ const sharedActionMap = {
     bucketPutReplication: 's3:PutReplicationConfiguration',
     bucketPutVersioning: 's3:PutBucketVersioning',
     bucketPutWebsite: 's3:PutBucketWebsite',
+    bypassGovernanceRetention: 's3:BypassGovernanceRetention',
     listMultipartUploads: 's3:ListBucketMultipartUploads',
     listParts: 's3:ListMultipartUploadParts',
     multipartDelete: 's3:AbortMultipartUpload',
@@ -90,6 +91,7 @@ const actionMonitoringMapS3 = {
     bucketGetPolicy: 'GetBucketPolicy',
     bucketGetReplication: 'GetBucketReplication',
     bucketGetVersioning: 'GetBucketVersioning',
+    bucketGetEncryption: 'GetBucketEncryption',
     bucketGetWebsite: 'GetBucketWebsite',
     bucketHead: 'HeadBucket',
     bucketPut: 'CreateBucket',
@@ -102,6 +104,7 @@ const actionMonitoringMapS3 = {
     bucketPutReplication: 'PutBucketReplication',
     bucketPutVersioning: 'PutBucketVersioning',
     bucketPutWebsite: 'PutBucketWebsite',
+    bypassGovernanceRetention: 'BypassGovernanceRetention',
     completeMultipartUpload: 'CompleteMultipartUpload',
     initiateMultipartUpload: 'CreateMultipartUpload',
     listMultipartUploads: 'ListMultipartUploads',

lib/s3routes/routes/routeGET.js

@@ -3,6 +3,7 @@ const routesUtils = require('../routesUtils');
 
 function routerGET(request, response, api, log, statsClient, dataRetrievalFn) {
     log.debug('routing request', { method: 'routerGET' });
+    console.log(request.query)
     if (request.bucketName === undefined && request.objectKey !== undefined) {
         routesUtils.responseXMLBody(errors.NoSuchBucket, null, response, log);
     } else if (request.bucketName === undefined
@@ -92,6 +93,13 @@ function routerGET(request, response, api, log, statsClient, dataRetrievalFn) {
                     return routesUtils.responseXMLBody(err, xml, response,
                         log, corsHeaders);
                 });
+        } else if (request.query.encryption !== undefined) {
+            api.callApiMethod('bucketGetEncryption', request, response, log,
+            (err, xml, corsHeaders) => {
+                routesUtils.statsReport500(err, statsClient);
+                return routesUtils.responseXMLBody(err, xml, response,
+                    log, corsHeaders);
+            });
         } else {
             // GET bucket
             api.callApiMethod('bucketGet', request, response, log,