diff --git a/kms.tf b/kms.tf
index a70a69e..6828142 100644
--- a/kms.tf
+++ b/kms.tf
@@ -1,5 +1,6 @@
 resource "aws_kms_key" "rhel_x86_codepipeline_key" {
   description = "KMS key for RHEL x86 CodePipeline"
+
   policy = <<EOF
 {
   "Version": "2012-10-17",
diff --git a/s3.tf b/s3.tf
index 5459f3d..aa6d04e 100644
--- a/s3.tf
+++ b/s3.tf
@@ -1,5 +1,15 @@
 resource "aws_s3_bucket" "rhel_x86_codepipeline_bucket" {
   bucket = "rhel-x86-codepipeline-bucket-${random_string.suffix.result}"
+  force_destroy = true
+
+  server_side_encryption_configuration {
+    rule {
+      apply_server_side_encryption_by_default {
+        sse_algorithm     = "aws:kms"
+        kms_master_key_id = aws_kms_key.rhel_x86_codepipeline_key.arn
+      }
+    }
+  }
 }
 
 resource "random_string" "suffix" {