diff --git a/dir/cfngoat.yaml b/dir/cfngoat.yaml
index f7f0869b..9adf2e66 100644
--- a/dir/cfngoat.yaml
+++ b/dir/cfngoat.yaml
@@ -35,6 +35,10 @@ Resources:
       Tags:
         - Key: Name
           Value: !Sub "my-data"
+      BucketEncryption:
+        ServerSideEncryptionConfiguration:
+          - ServerSideEncryptionByDefault:
+              SSEAlgorithm: AES256
 
 Outputs:
   EC2PublicDNS: