BL_ENCKEY= LIBNAME Statement Option

Specifies the name of the encryption key to use when you access an Amazon S3 environment.

Valid in: SAS/ACCESS LIBNAME statement
Categories: Bulk Loading
Data Access
Aliases: BL_ENC_KEY=
BL_ENCRYPTION_KEY=
Default: none
Data source: Amazon Redshift, Spark
Note: Support for Spark was added in SAS 9.4M9.
See: BL_ENCKEY= data set option, BULKLOAD= LIBNAME option, BULKUNLOAD= LIBNAME option, S3 procedure documentation

Table of Contents

Syntax

Syntax Description

encryption-key-name

specifies the name that is associated with an encryption key. The name matches a name that was assigned to an encryption key by using the S3 procedure.

Details

When you specify the BL_ENCKEY= option, you enable server-side encryption for all communication with an Amazon S3 environment.

You use the S3 procedure to register an encryption key and assign a corresponding name. This is the name that you provide as the value for the BL_ENCKEY= option. For more information, see the ENCKEY statement of the S3 Procedure in Base SAS Procedures Guide.

This option works well with the BULKLOAD= and BULKUNLOAD= options.

Spark: This option is supported for bulk loading to Databricks in AWS. For more information, see Bulk Loading and Unloading to Databricks in Azure.

Last updated: February 3, 2026