# EncryptionConfigurationProperty

Settings to configure server-side encryption for an activity.

By default, Step Functions provides transparent server-side encryption. With this configuration, you can specify a customer managed AWS  key for encryption.

- Source: Generated code
- Type last changed: v2.154.0 · 22 Aug 2024

## Example

```ts
// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import { aws_stepfunctions as stepfunctions } from 'aws-cdk-lib';
const encryptionConfigurationProperty: stepfunctions.CfnActivity.EncryptionConfigurationProperty = {
  type: 'type',

  // the properties below are optional
  kmsDataKeyReusePeriodSeconds: 123,
  kmsKeyId: 'kmsKeyId',
};
```

## Properties

- `kmsDataKeyReusePeriodSeconds`: number — Maximum duration that Step Functions will reuse data keys.

  When the period expires, Step Functions will call `GenerateDataKey` . Only applies to customer managed keys.

- `kmsKeyId`: string — An alias, alias ARN, key ID, or key ARN of a symmetric encryption AWS key to encrypt data.

  To specify a AWS  key in a different AWS account, you must use the key ARN or alias ARN.

- `type`: string (required) — Encryption option for an activity.