diff --git a/terraform/aws/s3.tf b/terraform/aws/s3.tf
index c0f2b9651c..6af29a520f 100644
--- a/terraform/aws/s3.tf
+++ b/terraform/aws/s3.tf
@@ -34,6 +34,13 @@ resource "aws_s3_bucket" "financials" {
     Environment = local.resource_prefix.value
   }
 
+  server_side_encryption_configuration {
+    rule {
+      apply_server_side_encryption_by_default {
+        sse_algorithm = "AES256"
+      }
+    }
+  }
 }
 
 resource "aws_s3_bucket" "operations" {