title: cURL and s3 GET
body: <p>I'm trying to figure out what I need to provide in order to do a GET operation on an s3 object that has been encrypted using server-side encryption via a kms key. When trying to do a cURL on my test doc I get the following error:</p>
  
  <blockquote>
    <p>Requests specifying Server Side Encryption with AWS KMS managed keys
    require AWS Signature Version 4.</p>
  </blockquote>
  
  <p><strong>UPDATE:</strong> Adding the results from curl</p>
  
  <pre><code>$ curl -v https://s3-us-west-2.amazonaws.com/rkbtest/check.png
  *   Trying 54.231.185.12...
  * Connected to s3-us-west-2.amazonaws.com (54.231.185.12) port 443 (#0)
  * TLS 1.2 connection using TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
  * Server certificate: *.s3-us-west-2.amazonaws.com
  * Server certificate: DigiCert Baltimore CA-2 G2
  * Server certificate: Baltimore CyberTrust Root
  &gt; GET /rkbtest/check.png HTTP/1.1
  &gt; Host: s3-us-west-2.amazonaws.com
  &gt; User-Agent: curl/7.43.0
  &gt; Accept: */*
  &gt;
  &lt; HTTP/1.1 400 Bad Request
  &lt; x-amz-request-id: 2DECE9C69BDB8F0F
  &lt; x-amz-id-2: bs8xGSbAHksE2mSb/+r4AG3B9RlRTODasFyr5S3jMU2sNA7eJTEQr0dJTro5P2QKLRuMQtGw6tk=
  &lt; x-amz-region: us-west-2
  &lt; Content-Type: application/xml
  &lt; Transfer-Encoding: chunked
  &lt; Date: Wed, 21 Sep 2016 15:26:13 GMT
  &lt; Connection: close
  &lt; Server: AmazonS3
  &lt;
  &lt;?xml version="1.0" encoding="UTF-8"?&gt;
  * Closing connection 0
  &lt;Error&gt;&lt;Code&gt;InvalidArgument&lt;/Code&gt;&lt;Message&gt;Requests specifying Server Side Encryption with AWS KMS managed keys require AWS Signature Version 4.&lt;/Message&gt;&lt;ArgumentName&gt;Authorization&lt;/ArgumentName&gt;&lt;ArgumentValue&gt;null&lt;/ArgumentValue&gt;&lt;RequestId&gt;2DECE9C69BDB8F0F&lt;/RequestId&gt;&lt;HostId&gt;bs8xGSbAHksE2mSb/+r4AG3B9RlRTODasFyr5S3jMU2sNA7eJTEQr0dJTro5P2QKLRuMQtGw6tk=&lt;/HostId&gt;&lt;/Error&gt;
  </code></pre>