Do I need to re-encrypt all content in an S3 bucket if I move to KMS? - Do I need to re-encrypt all content in an S3 bucket if I move to KMS? - Alfresco - Alfresco Content Connector for AWS S3 - Alfresco/Alfresco-Content-Connector-for-AWS-S3/6.0/Alfresco-Content-Connector-for-AWS-S3/Alfresco-Content-Connector-for-AWS-S3/Content-Connector-for-AWS-S3-FAQ/Do-I-need-to-re-encrypt-all-content-in-an-S3-bucket-if-I-move-to-KMS - 6.0

No, content is encrypted with the S3 file itself, so content encrypted by a previous key will remain encrypted using that encryption. If you require the content to be re-encrypted, you will need to follow AWS recommended practices.