Amazon S3 default encryption using Amazon S3-managed keys (SSE-S3) is supported on S3 buckets that the CloudHealth platform integrates with.
SSE-S3 ensures encryption occurs at rest only and no additional configuration is required.
For more details on default encryption please see: Amazon S3 Default Encryption for S3 Buckets