AWS CDK Reference

Appearance

v2.275.0

QueueEncryption Enum ​

What kind of encryption to apply to this queue.

Source
aws-sqs/lib/queue-base.ts
Type last changed
v2.45.0 · 6 Oct 2022

Example ​

ts
// Use managed key
new sqs.Queue(this, 'Queue', {
  encryption: sqs.QueueEncryption.KMS_MANAGED,
});

// Use custom key
const myKey = new kms.Key(this, 'Key');

new sqs.Queue(this, 'Queue', {
  encryption: sqs.QueueEncryption.KMS,
  encryptionMasterKey: myKey,
});

// Use SQS managed server side encryption (SSE-SQS)
new sqs.Queue(this, 'Queue', {
  encryption: sqs.QueueEncryption.SQS_MANAGED,
});

// Unencrypted queue
new sqs.Queue(this, 'Queue', {
  encryption: sqs.QueueEncryption.UNENCRYPTED,
});

Members ​

MemberDescription
UNENCRYPTEDMessages in the queue are not encrypted.
KMS_MANAGEDServer-side KMS encryption with a KMS key managed by SQS.
KMSServer-side encryption with a KMS key managed by the user.
SQS_MANAGEDServer-side encryption key managed by SQS (SSE-SQS).

Referenced by ​

  • IQueue.encryptionTypeencryption_typeencryptionTypeEncryptionTypeEncryptionType
  • Queue.encryptionTypeencryption_typeencryptionTypeEncryptionTypeEncryptionType
  • QueueBase.encryptionTypeencryption_typeencryptionTypeEncryptionTypeEncryptionType
  • QueueProps.encryptionencryptionencryptionEncryptionEncryption