diff --git a/lib/plugins/aws/deploy/lib/uploadArtifacts.js b/lib/plugins/aws/deploy/lib/uploadArtifacts.js
index 6c7ad61d2..baafe8e6e 100644
--- a/lib/plugins/aws/deploy/lib/uploadArtifacts.js
+++ b/lib/plugins/aws/deploy/lib/uploadArtifacts.js
@@ -18,7 +18,15 @@ module.exports = {
       Body: body,
       ContentType: 'application/json',
     };
-
+    if (this.serverless.service.provider.deploymentBucketOptions.sse){
+      params.ServerSideEncryption = this.serverless.service.provider.deploymentBucketOptions.sse
+    }
+    if (this.serverless.service.provider.deploymentBucketOptions.sseKmsKeyId){
+      params.SSEKMSKeyId = this.serverless.service.provider.deploymentBucketOptions.sseKmsKeyId
+    }
+    if (this.serverless.service.provider.deploymentBucketOptions.sseCustomerKey){
+      params.SSECustomerKey = this.serverless.service.provider.deploymentBucketOptions.sseCustomerKey
+    }
     return this.provider.request('S3',
       'putObject',
       params,
@@ -35,6 +43,15 @@ module.exports = {
       Body: fs.createReadStream(artifactFilePath),
       ContentType: 'application/zip',
     };
+    if (this.serverless.service.provider.deploymentBucketOptions.sse){
+      params.ServerSideEncryption = this.serverless.service.provider.deploymentBucketOptions.sse
+    }
+    if (this.serverless.service.provider.deploymentBucketOptions.sseKmsKeyId){
+      params.SSEKMSKeyId = this.serverless.service.provider.deploymentBucketOptions.sseKmsKeyId
+    }
+    if (this.serverless.service.provider.deploymentBucketOptions.sseCustomerKey){
+      params.SSECustomerKey = this.serverless.service.provider.deploymentBucketOptions.sseCustomerKey
+    }
 
     return this.provider.request('S3',
       'putObject',