diff --git a/terraform/aws/s3.tf b/terraform/aws/s3.tf
index 3d4ec5d..7b5ff08 100644
--- a/terraform/aws/s3.tf
+++ b/terraform/aws/s3.tf
@@ -22,7 +22,7 @@ resource "aws_s3_bucket" "data" {
   server_side_encryption_configuration {
     rule {
       apply_server_side_encryption_by_default {
-        sse_algorithm = "AES256"
+        sse_algorithm = "aws:kms"
       }
     }
   }