Interface CfnDeliveryStreamPropsMixin.IDeliveryStreamEncryptionConfigurationInputProperty

Specifies the type and Amazon Resource Name (ARN) of the CMK to use for Server-Side Encryption (SSE).

Namespace: Amazon.CDK.CfnPropertyMixins.AWS.KinesisFirehose

Assembly: Amazon.CDK.CfnPropertyMixins.dll

Syntax (csharp)

public interface CfnDeliveryStreamPropsMixin.IDeliveryStreamEncryptionConfigurationInputProperty

Syntax (vb)

Public Interface CfnDeliveryStreamPropsMixin.IDeliveryStreamEncryptionConfigurationInputProperty

Remarks

See: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-kinesisfirehose-deliverystream-deliverystreamencryptionconfigurationinput.html

ExampleMetadata: fixture=_generated

Examples

// The code below shows an example of how to instantiate this type.
             // The values are placeholders you should change.
             using Amazon.CDK.CfnPropertyMixins.AWS.KinesisFirehose;

             var deliveryStreamEncryptionConfigurationInputProperty = new DeliveryStreamEncryptionConfigurationInputProperty {
                 KeyArn = "keyArn",
                 KeyType = "keyType"
             };

Synopsis

Properties

KeyArn	If you set `KeyType` to `CUSTOMER_MANAGED_CMK` , you must specify the Amazon Resource Name (ARN) of the CMK.
KeyType	Indicates the type of customer master key (CMK) to use for encryption.

Properties

KeyArn

If you set KeyType to CUSTOMER_MANAGED_CMK , you must specify the Amazon Resource Name (ARN) of the CMK.

object? KeyArn { get; }

Property Value

object

Remarks

If you set KeyType to AWS _OWNED_CMK , Firehose uses a service-account CMK.

See: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-kinesisfirehose-deliverystream-deliverystreamencryptionconfigurationinput.html#cfn-kinesisfirehose-deliverystream-deliverystreamencryptionconfigurationinput-keyarn

Type union: either string or IKeyRef

KeyType

Indicates the type of customer master key (CMK) to use for encryption.

string? KeyType { get; }

Property Value

string

Remarks

The default setting is AWS_OWNED_CMK . For more information about CMKs, see Customer Master Keys (CMKs) .

You can use a CMK of type CUSTOMER_MANAGED_CMK to encrypt up to 500 delivery streams.

To encrypt your delivery stream, use symmetric CMKs. Kinesis Data Firehose doesn't support asymmetric CMKs. For information about symmetric and asymmetric CMKs, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/symm-asymm-concepts.html">About Symmetric and Asymmetric CMKs</a> in the AWS Key Management Service developer guide.