s3_bucket: add encryption capabilities to the module (#55985)

* s3_bucket: add encryption capabilities to the module

test/integration/targets/s3_bucket/tasks/main.yml

@@ -41,7 +41,7 @@
           - not output.requester_pays
 
     # ============================================================
-    - name: Delete s3_bucket
+    - name: Delete test s3_bucket
       s3_bucket:
         name: "{{ resource_prefix }}-testbucket-ansible"
         state: absent
@@ -108,7 +108,7 @@
           - not output.changed
 
     # ============================================================
-    - name: Update bucket policy
+    - name: Update bucket policy on complex bucket
       s3_bucket:
         name: "{{ resource_prefix }}-testbucket-ansible-complex"
         state: present
@@ -224,7 +224,11 @@
           - output.tags == {}
 
     # ============================================================
-    - name: Delete s3_bucket
+    - name: Pause to help with s3 bucket eventual consistency
+      pause:
+        seconds: 5
+
+    - name: Delete complex s3 bucket
       s3_bucket:
         name: "{{ resource_prefix }}-testbucket-ansible-complex"
         state: absent
@@ -250,7 +254,11 @@
 
 
     # ============================================================
-    - name: Delete s3_bucket
+    - name: Pause to help with s3 bucket eventual consistency
+      pause:
+        seconds: 15
+
+    - name: Delete s3_bucket with dot in name
       s3_bucket:
         name: "{{ resource_prefix }}.testbucket.ansible"
         state: absent
@@ -264,7 +272,7 @@
     # ============================================================
     - name: Try to delete a missing bucket (should not fail)
       s3_bucket:
-        name: "{{ resource_prefix }}.testbucket.ansible.missing"
+        name: "{{ resource_prefix }}-testbucket-ansible-missing"
         state: absent
         <<: *aws_connection_info
       register: output
@@ -272,7 +280,64 @@
     - assert:
         that:
           - not output.changed
+    # ============================================================
+    - name: Create bucket with AES256 encryption enabled
+      s3_bucket:
+        name: "{{ resource_prefix }}-testbucket-encrypt-ansible"
+        state: present
+        encryption: "AES256"
+        <<: *aws_connection_info
+      register: output
 
+    - assert:
+        that:
+          - output.changed
+          - output.name == '{{ resource_prefix }}-testbucket-encrypt-ansible'
+          - output.encryption
+          - output.encryption.SSEAlgorithm == 'AES256'
+
+    - name: Update bucket with same encryption config
+      s3_bucket:
+        name: "{{ resource_prefix }}-testbucket-encrypt-ansible"
+        state: present
+        encryption: "AES256"
+        <<: *aws_connection_info
+      register: output
+
+    - assert:
+        that:
+          - not output.changed
+          - output.encryption
+          - output.encryption.SSEAlgorithm == 'AES256'
+
+    - name: Disable encryption from bucket
+      s3_bucket:
+        name: "{{ resource_prefix }}-testbucket-encrypt-ansible"
+        state: present
+        encryption: "none"
+        <<: *aws_connection_info
+      register: output
+
+    - assert:
+        that:
+          - output.changed
+          - not output.encryption
+
+    # ============================================================
+    - name: Pause to help with s3 bucket eventual consistency
+      pause:
+        seconds: 10
+
+    - name: Delete encryption test s3 bucket
+      s3_bucket:
+        name: "{{ resource_prefix }}-testbucket-encrypt-ansible"
+        state: absent
+        <<: *aws_connection_info
+      register: output
+
+    - assert:
+        that:
+          - output.changed
   # ============================================================
   always:
     - name: Ensure all buckets are deleted
@@ -285,3 +350,4 @@
         - "{{ resource_prefix }}-testbucket-ansible"
         - "{{ resource_prefix }}-testbucket-ansible-complex"
         - "{{ resource_prefix }}.testbucket.ansible"
+        - "{{ resource_prefix }}-testbucket-encrypt-ansible"