interface LogsEncryptionConfigurationProperty

Language	Type name
.NET	Amazon.CDK.CfnPropertyMixins.AWS.ObservabilityAdmin.CfnOrganizationCentralizationRulePropsMixin.LogsEncryptionConfigurationProperty
Go	github.com/aws/aws-cdk-go/awscdkcfnpropertymixins/v2/awsobservabilityadmin#CfnOrganizationCentralizationRulePropsMixin_LogsEncryptionConfigurationProperty
Java	software.amazon.awscdk.cfnpropertymixins.services.observabilityadmin.CfnOrganizationCentralizationRulePropsMixin.LogsEncryptionConfigurationProperty
Python	aws_cdk.cfn_property_mixins.aws_observabilityadmin.CfnOrganizationCentralizationRulePropsMixin.LogsEncryptionConfigurationProperty
TypeScript	@aws-cdk/cfn-property-mixins » aws_observabilityadmin » CfnOrganizationCentralizationRulePropsMixin » LogsEncryptionConfigurationProperty

Configuration for encrypting centralized log groups.

This configuration is only applied to destination log groups for which the corresponding source log groups are encrypted using Customer Managed KMS Keys.

See also: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-observabilityadmin-organizationcentralizationrule-logsencryptionconfiguration.html

Example

// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import { aws_observabilityadmin as observabilityadmin } from '@aws-cdk/cfn-property-mixins';
const logsEncryptionConfigurationProperty: observabilityadmin.CfnOrganizationCentralizationRulePropsMixin.LogsEncryptionConfigurationProperty = {
  encryptionConflictResolutionStrategy: 'encryptionConflictResolutionStrategy',
  encryptionStrategy: 'encryptionStrategy',
  kmsKeyArn: 'kmsKeyArn',
};

Properties

Name	Type	Description
encryptionConflictResolutionStrategy?	string	Conflict resolution strategy for centralization if the encryption strategy is set to CUSTOMER_MANAGED and the destination log group is encrypted with an AWS_OWNED KMS Key.
encryptionStrategy?	string	Configuration that determines the encryption strategy of the destination log groups.
kmsKeyArn?	string	KMS Key ARN belonging to the primary destination account and region, to encrypt newly created central log groups in the primary destination.

---

encryptionConflictResolutionStrategy?

Type: string (optional)

Conflict resolution strategy for centralization if the encryption strategy is set to CUSTOMER_MANAGED and the destination log group is encrypted with an AWS_OWNED KMS Key.

ALLOW lets centralization go through while SKIP prevents centralization into the destination log group.

See also: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-observabilityadmin-organizationcentralizationrule-logsencryptionconfiguration.html#cfn-observabilityadmin-organizationcentralizationrule-logsencryptionconfiguration-encryptionconflictresolutionstrategy

---

encryptionStrategy?

Type: string (optional)

Configuration that determines the encryption strategy of the destination log groups.

CUSTOMER_MANAGED uses the configured KmsKeyArn to encrypt newly created destination log groups.

See also: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-observabilityadmin-organizationcentralizationrule-logsencryptionconfiguration.html#cfn-observabilityadmin-organizationcentralizationrule-logsencryptionconfiguration-encryptionstrategy

---

kmsKeyArn?

Type: string (optional)

KMS Key ARN belonging to the primary destination account and region, to encrypt newly created central log groups in the primary destination.

See also: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-observabilityadmin-organizationcentralizationrule-logsencryptionconfiguration.html#cfn-observabilityadmin-organizationcentralizationrule-logsencryptionconfiguration-kmskeyarn