Looks like this is resloved in hadoop 2.8.0 ( not sure though)  check this ==.> https://github.com/minio/minio/issues/2965   only workaround i found is first load data without  encryption and then enable encryption  on file copied in S3 (manually) .    btw i have a general question . this SSE is to portect data in S3 only ,what about if someone with aws admin role download data to local disk ,its not more encrypted data    ... View more