Skip to content
v2.273.0

EncryptionConfiguration Class ​

Base class for creating an EncryptionConfiguration for either state machines or activities.

Example ​

ts
import * as kms from 'aws-cdk-lib/aws-kms';
import * as cdk from 'aws-cdk-lib';

const kmsKey = new kms.Key(this, 'Key');
const stateMachine = new sfn.StateMachine(this, 'StateMachineWithCMKEncryptionConfiguration', {
  stateMachineName: 'StateMachineWithCMKEncryptionConfiguration',
  definitionBody: sfn.DefinitionBody.fromChainable(sfn.Chain.start(new sfn.Pass(this, 'Pass'))),
  stateMachineType: sfn.StateMachineType.STANDARD,
  encryptionConfiguration: new sfn.CustomerManagedEncryptionConfiguration(kmsKey, cdk.Duration.seconds(60)),
});

Initializer ​

ts
new EncryptionConfiguration(type: string)
python
EncryptionConfiguration(type: str)
java
new EncryptionConfiguration(String type)
csharp
new EncryptionConfiguration(string type)
go
NewEncryptionConfiguration(Type *string)

Properties ​

typestringtypestrtypeStringTypestringType*stringrequired#
Encryption option for the state machine or activity.

Can be either CUSTOMER_MANAGED_KMS_KEY or AWS_OWNED_KEY.