-record(server_side_encryption_by_default, { kms_master_key_id :: gleam@option:option(binary()), sse_algorithm :: aws@services@s3:server_side_encryption() }).