# bedrockagentcore-gateway-encryption-enabled
<a name="bedrockagentcore-gateway-encryption-enabled"></a>

Checks whether an Amazon Bedrock AgentCore Gateway is encrypted with a customer-managed KMS key. The rule is NON\_COMPLIANT if the gateway does not have KmsKeyArn configured. 



**Identifier:** BEDROCKAGENTCORE\_GATEWAY\_ENCRYPTION\_ENABLED

**Resource Types:** AWS::BedrockAgentCore::Gateway

**Trigger type:** Configuration changes

**AWS Region:** Only available in Europe (Stockholm), Asia Pacific (Mumbai), Europe (Paris), US East (Ohio), Europe (Ireland), Europe (Frankfurt), US East (N. Virginia), Asia Pacific (Seoul), Europe (London), Asia Pacific (Tokyo), US West (Oregon), Asia Pacific (Singapore), Asia Pacific (Sydney), Canada (Central) Region

**Parameters:**

None  

## AWS CloudFormation template
<a name="w2aac20c16c17b7d289c19"></a>

To create AWS Config managed rules with AWS CloudFormation templates, see [Creating AWS Config Managed Rules With AWS CloudFormation Templates](aws-config-managed-rules-cloudformation-templates.md).