diff --git a/terraform.tf b/terraform.tf
index c0f2b965..79fa3b0f 100644
--- a/terraform.tf
+++ b/terraform.tf
@@ -10,6 +10,13 @@ resource "aws_s3_bucket" "data" {
     Name        = "${local.resource_prefix.value}-data"
     Environment = local.resource_prefix.value
   }
+  server_side_encryption_configuration {
+    rule {
+      apply_server_side_encryption_by_default {
+        sse_algorithm = "AES256"
+      }
+    }
+  }
 }
 
 resource "aws_s3_bucket_object" "data_object" {