# CustomSecretConfigProperty

Specifies configuration information for a customer-managed secret, such as an authentication token or set of credentials that DataSync uses to access a specific transfer location, and an IAM role that DataSync can assume and access the customer-managed secret.

- Source: Generated code
- Type last changed: v2.242.0 · 10 Mar 2026

## Example

```ts
// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import { aws_datasync as datasync } from 'aws-cdk-lib';
const customSecretConfigProperty: datasync.CfnLocationHDFS.CustomSecretConfigProperty = {
  secretAccessRoleArn: 'secretAccessRoleArn',
  secretArn: 'secretArn',
};
```

## Properties

- `secretAccessRoleArn`: string (required) — Specifies the ARN for the AWS Identity and Access Management role that DataSync uses to access the secret specified for SecretArn.

- `secretArn`: string (required) — Specifies the ARN for a customer created AWS Secrets Manager secret.