AWS::DLM::LifecyclePolicy EncryptionConfiguration - AWS CloudFormation

AWS::DLM::LifecyclePolicy EncryptionConfiguration

[Event-based policies only] Specifies the encryption settings for cross-Region snapshot copies created by event-based policies.


To declare this entity in your AWS CloudFormation template, use the following syntax:


{ "CmkArn" : String, "Encrypted" : Boolean }


CmkArn: String Encrypted: Boolean



The Amazon Resource Name (ARN) of the AWS KMS key to use for EBS encryption. If this parameter is not specified, the default KMS key for the account is used.

Required: No

Type: String

Pattern: arn:aws(-[a-z]{1,3}){0,2}:kms:([a-z]+-){2,3}\d:\d+:key/.*

Minimum: 0

Maximum: 2048

Update requires: No interruption


To encrypt a copy of an unencrypted snapshot when encryption by default is not enabled, enable encryption using this parameter. Copies of encrypted snapshots are encrypted, even if this parameter is false or when encryption by default is not enabled.

Required: Yes

Type: Boolean

Update requires: No interruption