BL_ENCKEY= Data Set Option

Specifies the name of the encryption key to use when you access an Amazon S3 environment.

Valid in: DATA and PROC steps (when accessing DBMS data using SAS/ACCESS software)
Category: Data Access
Aliases: BL_ENC_KEY=
BL_ENCRYPTION_KEY=
Default: LIBNAME option value
Requirement: To specify this option, you must first specify BULKLOAD=YES.
Data source: Amazon Redshift, Snowflake, Spark
Note: Support for Spark was added in SAS 9.4M9.
Tip: You can also use this option with the BULKUNLOAD= option.
See: BL_ENCKEY= LIBNAME option, BULKLOAD= data set option, BULKUNLOAD= data set option, S3 procedure documentation

Table of Contents

Syntax

BL_ENCKEY=encryption-key-name

Required Argument

encryption-key-name

specifies the name that is associated with an encryption key. The name matches a name that was assigned to an encryption key by using the S3 procedure.

Details

When you specify the BL_ENCKEY= option, you enable server-side encryption for all communication with an Amazon S3 environment.

You use the S3 procedure to register an encryption key and assign a corresponding name. This is the name that you provide as the value for the BL_ENCKEY= option. For more information, see the ENCKEY statement in the S3 Procedure in Base SAS Procedures Guide.

Spark: This option is supported for bulk loading to Databricks in AWS. For more information, see Bulk Loading and Unloading to Databricks in Azure.

Last updated: February 3, 2026