Skip to content
v2.275.0

EncryptionConfigurationProperty Struct ​

Server-side encryption configuration for data at rest in the destination.

Data delivered to S3 / S3 Tables is encrypted with the same key.

Example ​

ts
// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import { aws_kinesis as kinesis } from 'aws-cdk-lib';
const encryptionConfigurationProperty: kinesis.CfnChannel.EncryptionConfigurationProperty = {
  encryptionType: 'encryptionType',
  keyId: 'keyId',
};

Properties ​

encryptionTypestringencryption_typestrencryptionTypeStringEncryptionTypestringEncryptionType*stringrequired#
The encryption type.

KMS is the only supported value.

keyIdstringkey_idstrkeyIdStringKeyIdstringKeyId*stringrequired#
The customer-managed AWS KMS key.

Accepts a key GUID, key ARN, alias ARN, or alias name prefixed by 'alias/'. The Kinesis Data Streams managed alias 'aws/kinesis' is not accepted - the key must be customer-owned so it can also be used by readers of the destination.