title: AWS S3: Get Server-side encryption settings using CLI
body: <p>I can use the Amazon S3 web GUI console, click on a file on S3, and see the Server-side encryption settings, including which AWS KMS key is used.</p>
  <p>How can I get this same information with the CLI? I've checked every obvious command and I'm finding nothing.</p>
  <p>This shows me bucket level info, I want file level info:</p>
  <pre class="lang-sh prettyprint-override"><code>aws s3api get-bucket-encryption
  </code></pre>
  <p>This doesn't show KMS/SSE info:</p>
  <pre class="lang-sh prettyprint-override"><code>aws s3api get-object-acl
  </code></pre>
  <p>This just downloads the file, it doesn't get properties about the file:</p>
  <pre class="lang-sh prettyprint-override"><code>aws s3api get-object
  </code></pre>