diff --git a/aws-s3/main.tf b/aws-s3/main.tf
index 647a6d3..c70110c 100644
--- a/aws-s3/main.tf
+++ b/aws-s3/main.tf
@@ -24,10 +24,22 @@ provider "aws" {
   region = var.aws_region
 }
 
-# Create a new s3 bucket
+# Create a new S3 bucket with encryption and versioning
 resource "aws_s3_bucket" "s3bucket" {
-  bucket = "test-bucket-${random_string.bucket_suffix.result}"
+  bucket        = "test-bucket-${random_string.bucket_suffix.result}"
   force_destroy = true
+
+  versioning {
+    enabled = true
+  }
+
+  server_side_encryption_configuration {
+    rule {
+      apply_server_side_encryption_by_default {
+        sse_algorithm = "AES256"
+      }
+    }
+  }
 }
 
 # Generate a random suffix for bucket name
@@ -37,9 +49,10 @@ resource "random_string" "bucket_suffix" {
   upper   = false
 }
 
-# Upload file to s3 bucker
-resource "aws_s3_object" "bucket-data" {
+# Upload file to S3 bucket
+resource "aws_s3_object" "bucket_data" {
   bucket = aws_s3_bucket.s3bucket.bucket
   source = "./myfile.txt"
   key    = "myfile.txt"
+  acl    = "private"
 }
\ No newline at end of file