diff --git a/api/src/lib/aws.ts b/api/src/lib/aws.ts
index b802dc3c..f8fb44ff 100644
--- a/api/src/lib/aws.ts
+++ b/api/src/lib/aws.ts
@@ -110,6 +110,7 @@ export async function s3PutSignedUrl(
     Key: key,
     ContentType:
       'application/vnd.openxmlformats-officedocument.spreadsheetml.sheet',
+    ServerSideEncryption: 'AES256',
   }
   const url = await awsGetSignedUrl(s3, new PutObjectCommand(baseParams), {
     expiresIn: 60,
diff --git a/terraform/functions.tf b/terraform/functions.tf
index 7a2da911..c5bcac41 100644
--- a/terraform/functions.tf
+++ b/terraform/functions.tf
@@ -134,7 +134,7 @@ module "reporting_data_bucket" {
   cors_configuration = [
     {
       allowed_methods = ["GET", "HEAD", "POST", "PUT"]
-      allowed_origins = [var.website_domain_name]
+      allowed_origins = ["https://${var.website_domain_name}"]
       allowed_headers = ["*"]
       expose_headers = [
         "Content-Disposition",