diff --git a/clients/client-s3/src/commands/CompleteMultipartUploadCommand.ts b/clients/client-s3/src/commands/CompleteMultipartUploadCommand.ts
index 346c454b9650..92ad7c892624 100644
--- a/clients/client-s3/src/commands/CompleteMultipartUploadCommand.ts
+++ b/clients/client-s3/src/commands/CompleteMultipartUploadCommand.ts
@@ -206,7 +206,7 @@ export interface CompleteMultipartUploadCommandOutput extends CompleteMultipartU
  * //   ChecksumCRC32C: "STRING_VALUE",
  * //   ChecksumSHA1: "STRING_VALUE",
  * //   ChecksumSHA256: "STRING_VALUE",
- * //   ServerSideEncryption: "AES256" || "aws:kms",
+ * //   ServerSideEncryption: "AES256" || "aws:kms" || "aws:kms:dsse",
  * //   VersionId: "STRING_VALUE",
  * //   SSEKMSKeyId: "STRING_VALUE",
  * //   BucketKeyEnabled: true || false,
diff --git a/clients/client-s3/src/commands/CopyObjectCommand.ts b/clients/client-s3/src/commands/CopyObjectCommand.ts
index 768be5f5a9d0..7a08fb02286c 100644
--- a/clients/client-s3/src/commands/CopyObjectCommand.ts
+++ b/clients/client-s3/src/commands/CopyObjectCommand.ts
@@ -285,7 +285,7 @@ export interface CopyObjectCommandOutput extends CopyObjectOutput, __MetadataBea
  *   },
  *   MetadataDirective: "COPY" || "REPLACE",
  *   TaggingDirective: "COPY" || "REPLACE",
- *   ServerSideEncryption: "AES256" || "aws:kms",
+ *   ServerSideEncryption: "AES256" || "aws:kms" || "aws:kms:dsse",
  *   StorageClass: "STANDARD" || "REDUCED_REDUNDANCY" || "STANDARD_IA" || "ONEZONE_IA" || "INTELLIGENT_TIERING" || "GLACIER" || "DEEP_ARCHIVE" || "OUTPOSTS" || "GLACIER_IR" || "SNOW",
  *   WebsiteRedirectLocation: "STRING_VALUE",
  *   SSECustomerAlgorithm: "STRING_VALUE",
@@ -319,7 +319,7 @@ export interface CopyObjectCommandOutput extends CopyObjectOutput, __MetadataBea
  * //   Expiration: "STRING_VALUE",
  * //   CopySourceVersionId: "STRING_VALUE",
  * //   VersionId: "STRING_VALUE",
- * //   ServerSideEncryption: "AES256" || "aws:kms",
+ * //   ServerSideEncryption: "AES256" || "aws:kms" || "aws:kms:dsse",
  * //   SSECustomerAlgorithm: "STRING_VALUE",
  * //   SSECustomerKeyMD5: "STRING_VALUE",
  * //   SSEKMSKeyId: "STRING_VALUE",
diff --git a/clients/client-s3/src/commands/CreateMultipartUploadCommand.ts b/clients/client-s3/src/commands/CreateMultipartUploadCommand.ts
index eae4117abc2c..57927d268694 100644
--- a/clients/client-s3/src/commands/CreateMultipartUploadCommand.ts
+++ b/clients/client-s3/src/commands/CreateMultipartUploadCommand.ts
@@ -358,7 +358,7 @@ export interface CreateMultipartUploadCommandOutput extends CreateMultipartUploa
  *   Metadata: { // Metadata
  *     "<keys>": "STRING_VALUE",
  *   },
- *   ServerSideEncryption: "AES256" || "aws:kms",
+ *   ServerSideEncryption: "AES256" || "aws:kms" || "aws:kms:dsse",
  *   StorageClass: "STANDARD" || "REDUCED_REDUNDANCY" || "STANDARD_IA" || "ONEZONE_IA" || "INTELLIGENT_TIERING" || "GLACIER" || "DEEP_ARCHIVE" || "OUTPOSTS" || "GLACIER_IR" || "SNOW",
  *   WebsiteRedirectLocation: "STRING_VALUE",
  *   SSECustomerAlgorithm: "STRING_VALUE",
@@ -383,7 +383,7 @@ export interface CreateMultipartUploadCommandOutput extends CreateMultipartUploa
  * //   Bucket: "STRING_VALUE",
  * //   Key: "STRING_VALUE",
  * //   UploadId: "STRING_VALUE",
- * //   ServerSideEncryption: "AES256" || "aws:kms",
+ * //   ServerSideEncryption: "AES256" || "aws:kms" || "aws:kms:dsse",
  * //   SSECustomerAlgorithm: "STRING_VALUE",
  * //   SSECustomerKeyMD5: "STRING_VALUE",
  * //   SSEKMSKeyId: "STRING_VALUE",
diff --git a/clients/client-s3/src/commands/GetBucketEncryptionCommand.ts b/clients/client-s3/src/commands/GetBucketEncryptionCommand.ts
index 0c6c55585249..6dd8ff645a57 100644
--- a/clients/client-s3/src/commands/GetBucketEncryptionCommand.ts
+++ b/clients/client-s3/src/commands/GetBucketEncryptionCommand.ts
@@ -79,7 +79,7 @@ export interface GetBucketEncryptionCommandOutput extends GetBucketEncryptionOut
  * //     Rules: [ // ServerSideEncryptionRules // required
  * //       { // ServerSideEncryptionRule
  * //         ApplyServerSideEncryptionByDefault: { // ServerSideEncryptionByDefault
- * //           SSEAlgorithm: "AES256" || "aws:kms", // required
+ * //           SSEAlgorithm: "AES256" || "aws:kms" || "aws:kms:dsse", // required
  * //           KMSMasterKeyID: "STRING_VALUE",
  * //         },
  * //         BucketKeyEnabled: true || false,
diff --git a/clients/client-s3/src/commands/GetObjectCommand.ts b/clients/client-s3/src/commands/GetObjectCommand.ts
index cf808eb2f0a5..f5deaf94a3bc 100644
--- a/clients/client-s3/src/commands/GetObjectCommand.ts
+++ b/clients/client-s3/src/commands/GetObjectCommand.ts
@@ -266,7 +266,7 @@ export interface GetObjectCommandOutput extends __WithSdkStreamMixin<GetObjectOu
  * //   ContentType: "STRING_VALUE",
  * //   Expires: new Date("TIMESTAMP"),
  * //   WebsiteRedirectLocation: "STRING_VALUE",
- * //   ServerSideEncryption: "AES256" || "aws:kms",
+ * //   ServerSideEncryption: "AES256" || "aws:kms" || "aws:kms:dsse",
  * //   Metadata: { // Metadata
  * //     "<keys>": "STRING_VALUE",
  * //   },
diff --git a/clients/client-s3/src/commands/HeadObjectCommand.ts b/clients/client-s3/src/commands/HeadObjectCommand.ts
index 57973efe391f..bef28c9584a1 100644
--- a/clients/client-s3/src/commands/HeadObjectCommand.ts
+++ b/clients/client-s3/src/commands/HeadObjectCommand.ts
@@ -202,7 +202,7 @@ export interface HeadObjectCommandOutput extends HeadObjectOutput, __MetadataBea
  * //   ContentType: "STRING_VALUE",
  * //   Expires: new Date("TIMESTAMP"),
  * //   WebsiteRedirectLocation: "STRING_VALUE",
- * //   ServerSideEncryption: "AES256" || "aws:kms",
+ * //   ServerSideEncryption: "AES256" || "aws:kms" || "aws:kms:dsse",
  * //   Metadata: { // Metadata
  * //     "<keys>": "STRING_VALUE",
  * //   },
diff --git a/clients/client-s3/src/commands/PutBucketEncryptionCommand.ts b/clients/client-s3/src/commands/PutBucketEncryptionCommand.ts
index e23d07c9693c..e72aa150bb95 100644
--- a/clients/client-s3/src/commands/PutBucketEncryptionCommand.ts
+++ b/clients/client-s3/src/commands/PutBucketEncryptionCommand.ts
@@ -85,7 +85,7 @@ export interface PutBucketEncryptionCommandOutput extends __MetadataBearer {}
  *     Rules: [ // ServerSideEncryptionRules // required
  *       { // ServerSideEncryptionRule
  *         ApplyServerSideEncryptionByDefault: { // ServerSideEncryptionByDefault
- *           SSEAlgorithm: "AES256" || "aws:kms", // required
+ *           SSEAlgorithm: "AES256" || "aws:kms" || "aws:kms:dsse", // required
  *           KMSMasterKeyID: "STRING_VALUE",
  *         },
  *         BucketKeyEnabled: true || false,
diff --git a/clients/client-s3/src/commands/PutObjectCommand.ts b/clients/client-s3/src/commands/PutObjectCommand.ts
index 97d83583f7c6..5b6deff4bc2d 100644
--- a/clients/client-s3/src/commands/PutObjectCommand.ts
+++ b/clients/client-s3/src/commands/PutObjectCommand.ts
@@ -174,7 +174,7 @@ export interface PutObjectCommandOutput extends PutObjectOutput, __MetadataBeare
  *   Metadata: { // Metadata
  *     "<keys>": "STRING_VALUE",
  *   },
- *   ServerSideEncryption: "AES256" || "aws:kms",
+ *   ServerSideEncryption: "AES256" || "aws:kms" || "aws:kms:dsse",
  *   StorageClass: "STANDARD" || "REDUCED_REDUNDANCY" || "STANDARD_IA" || "ONEZONE_IA" || "INTELLIGENT_TIERING" || "GLACIER" || "DEEP_ARCHIVE" || "OUTPOSTS" || "GLACIER_IR" || "SNOW",
  *   WebsiteRedirectLocation: "STRING_VALUE",
  *   SSECustomerAlgorithm: "STRING_VALUE",
@@ -199,7 +199,7 @@ export interface PutObjectCommandOutput extends PutObjectOutput, __MetadataBeare
  * //   ChecksumCRC32C: "STRING_VALUE",
  * //   ChecksumSHA1: "STRING_VALUE",
  * //   ChecksumSHA256: "STRING_VALUE",
- * //   ServerSideEncryption: "AES256" || "aws:kms",
+ * //   ServerSideEncryption: "AES256" || "aws:kms" || "aws:kms:dsse",
  * //   VersionId: "STRING_VALUE",
  * //   SSECustomerAlgorithm: "STRING_VALUE",
  * //   SSECustomerKeyMD5: "STRING_VALUE",
diff --git a/clients/client-s3/src/commands/RestoreObjectCommand.ts b/clients/client-s3/src/commands/RestoreObjectCommand.ts
index 13e7363cc82c..e0b404c31b4f 100644
--- a/clients/client-s3/src/commands/RestoreObjectCommand.ts
+++ b/clients/client-s3/src/commands/RestoreObjectCommand.ts
@@ -352,7 +352,7 @@ export interface RestoreObjectCommandOutput extends RestoreObjectOutput, __Metad
  *         BucketName: "STRING_VALUE", // required
  *         Prefix: "STRING_VALUE", // required
  *         Encryption: { // Encryption
- *           EncryptionType: "AES256" || "aws:kms", // required
+ *           EncryptionType: "AES256" || "aws:kms" || "aws:kms:dsse", // required
  *           KMSKeyId: "STRING_VALUE",
  *           KMSContext: "STRING_VALUE",
  *         },
diff --git a/clients/client-s3/src/commands/UploadPartCommand.ts b/clients/client-s3/src/commands/UploadPartCommand.ts
index 569a0f6cba6d..cb1fcf3d3bf5 100644
--- a/clients/client-s3/src/commands/UploadPartCommand.ts
+++ b/clients/client-s3/src/commands/UploadPartCommand.ts
@@ -204,7 +204,7 @@ export interface UploadPartCommandOutput extends UploadPartOutput, __MetadataBea
  * const command = new UploadPartCommand(input);
  * const response = await client.send(command);
  * // { // UploadPartOutput
- * //   ServerSideEncryption: "AES256" || "aws:kms",
+ * //   ServerSideEncryption: "AES256" || "aws:kms" || "aws:kms:dsse",
  * //   ETag: "STRING_VALUE",
  * //   ChecksumCRC32: "STRING_VALUE",
  * //   ChecksumCRC32C: "STRING_VALUE",
diff --git a/clients/client-s3/src/commands/UploadPartCopyCommand.ts b/clients/client-s3/src/commands/UploadPartCopyCommand.ts
index 734bc7c23414..a7a82257ac70 100644
--- a/clients/client-s3/src/commands/UploadPartCopyCommand.ts
+++ b/clients/client-s3/src/commands/UploadPartCopyCommand.ts
@@ -251,7 +251,7 @@ export interface UploadPartCopyCommandOutput extends UploadPartCopyOutput, __Met
  * //     ChecksumSHA1: "STRING_VALUE",
  * //     ChecksumSHA256: "STRING_VALUE",
  * //   },
- * //   ServerSideEncryption: "AES256" || "aws:kms",
+ * //   ServerSideEncryption: "AES256" || "aws:kms" || "aws:kms:dsse",
  * //   SSECustomerAlgorithm: "STRING_VALUE",
  * //   SSECustomerKeyMD5: "STRING_VALUE",
  * //   SSEKMSKeyId: "STRING_VALUE",
diff --git a/clients/client-s3/src/commands/WriteGetObjectResponseCommand.ts b/clients/client-s3/src/commands/WriteGetObjectResponseCommand.ts
index 5afda7b9a44c..36abb8ca7e82 100644
--- a/clients/client-s3/src/commands/WriteGetObjectResponseCommand.ts
+++ b/clients/client-s3/src/commands/WriteGetObjectResponseCommand.ts
@@ -120,7 +120,7 @@ export interface WriteGetObjectResponseCommandOutput extends __MetadataBearer {}
  *   ReplicationStatus: "COMPLETE" || "PENDING" || "FAILED" || "REPLICA",
  *   RequestCharged: "requester",
  *   Restore: "STRING_VALUE",
- *   ServerSideEncryption: "AES256" || "aws:kms",
+ *   ServerSideEncryption: "AES256" || "aws:kms" || "aws:kms:dsse",
  *   SSECustomerAlgorithm: "STRING_VALUE",
  *   SSEKMSKeyId: "STRING_VALUE",
  *   SSECustomerKeyMD5: "STRING_VALUE",
diff --git a/clients/client-s3/src/models/models_0.ts b/clients/client-s3/src/models/models_0.ts
index 1ace01465b02..d6fef3406dbb 100644
--- a/clients/client-s3/src/models/models_0.ts
+++ b/clients/client-s3/src/models/models_0.ts
@@ -341,6 +341,7 @@ export interface AccessControlTranslation {
 export const ServerSideEncryption = {
   AES256: "AES256",
   aws_kms: "aws:kms",
+  aws_kms_dsse: "aws:kms:dsse",
 } as const;
 
 /**