Class: Aws::CloudWatchOmni::Types::EncryptionConfiguration

Inherits:

Struct

Object
Struct
Aws::CloudWatchOmni::Types::EncryptionConfiguration

show all

Defined in:: gems/aws-sdk-cloudwatchomni/lib/aws-sdk-cloudwatchomni/types.rb

Overview

How a resource's data at rest is encrypted.

kmsKeyArn is required when encryptionStrategy is CUSTOMER_MANAGED and must be absent when it is AWS_OWNED; a mismatch is a ValidationException rather than a silently ignored field, so a caller that selects AWS_OWNED while still passing a key learns that the key was not applied.

Constant Summary collapse

SENSITIVE =

[]

Instance Attribute Summary collapse

#encryption_strategy ⇒ String
Which kind of key to use.
#kms_key_arn ⇒ String
Customer managed KMS key ARN.

Instance Attribute Details

#encryption_strategy ⇒ `String`

Which kind of key to use. Required.

Returns:

(String)

# File 'gems/aws-sdk-cloudwatchomni/lib/aws-sdk-cloudwatchomni/types.rb', line 1947

class EncryptionConfiguration < Struct.new(
  :encryption_strategy,
  :kms_key_arn)
  SENSITIVE = []
  include Aws::Structure
end

#kms_key_arn ⇒ `String`

Customer managed KMS key ARN. Required when encryptionStrategy is CUSTOMER_MANAGED, and must be omitted when it is AWS_OWNED. Must be a symmetric ENCRYPT_DECRYPT key in the caller's account and region.