# CmkSecretConfigProperty

Specifies configuration information for a DataSync-managed secret, such as an authentication token or set of credentials that DataSync uses to access a specific transfer location, and a customer-managed AWS KMS key.

- Source: Generated code
- Type last changed: v2.242.0 · 10 Mar 2026

## Example

```ts
// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import { aws_datasync as datasync } from 'aws-cdk-lib';
const cmkSecretConfigProperty: datasync.CfnLocationHDFS.CmkSecretConfigProperty = {
  kmsKeyArn: 'kmsKeyArn',
  secretArn: 'secretArn',
};
```

## Properties

- `kmsKeyArn`: string — Specifies the ARN for the customer-managed AWS KMS key used to encrypt the secret specified for SecretArn.

  DataSync provides this key to AWS Secrets Manager.

- `secretArn`: string — Specifies the ARN for an AWS Secrets Manager secret, managed by DataSync.