# EncryptionConfigurationProperty

Server-side encryption configuration for data at rest in the destination.

Data delivered to S3 / S3 Tables is encrypted with the same key.

- Source: Generated code
- Type last changed: v2.272.0 · 30 Sep 2026

## Example

```ts
// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import { aws_kinesis as kinesis } from 'aws-cdk-lib';
const encryptionConfigurationProperty: kinesis.CfnChannel.EncryptionConfigurationProperty = {
  encryptionType: 'encryptionType',
  keyId: 'keyId',
};
```

## Properties

- `encryptionType`: string (required) — The encryption type.

  KMS is the only supported value.

- `keyId`: string (required) — The customer-managed AWS KMS key.

  Accepts a key GUID, key ARN, alias ARN, or alias name prefixed by 'alias/'. The Kinesis Data Streams managed alias 'aws/kinesis' is not accepted - the key must be customer-owned so it can also be used by readers of the destination.