When you enable client-side encryption for Amazon S3 targets, the Secure Agent fetches the data from the source, encrypts the data, and then writes the data to an Amazon S3 bucket.

To enable client-side encryption, you must provide a master symmetric key or customer master key in the connection properties and select the

Client Side Encryption

option in the advanced target properties. The Secure Agent encrypts the data by using the master symmetric key or customer master key.