# SecretsManagerEncryptionKeyConfigurationProperty

The configuration settings for transit encryption of a flow output using AWS Secrets Manager, including the secret ARN and role ARN.

- Source: Generated code
- Type last changed: v2.225.0 · 17 Nov 2025

## Example

```ts
// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import { aws_mediaconnect as mediaconnect } from 'aws-cdk-lib';
const secretsManagerEncryptionKeyConfigurationProperty: mediaconnect.CfnFlowOutput.SecretsManagerEncryptionKeyConfigurationProperty = {
  roleArn: 'roleArn',
  secretArn: 'secretArn',
};
```

## Properties

- `roleArn`: string (required) — The ARN of the IAM role used for transit encryption to the router input using AWS Secrets Manager.

- `secretArn`: string (required) — The ARN of the AWS Secrets Manager secret used for transit encryption to the router input.