AWS::DLM::LifecyclePolicy EncryptionConfiguration

[Event-based policies only] Specifies the encryption settings for cross-Region snapshot copies created by event-based policies.

Syntax

To declare this entity in your AWS CloudFormation template, use the following syntax:

JSON

{
  "CmkArn" : String,
  "Encrypted" : Boolean
}

YAML

  CmkArn: String
  Encrypted: Boolean

Properties

CmkArn

The Amazon Resource Name (ARN) of the AWS KMS key to use for EBS encryption. If this parameter is not specified, the default KMS key for the account is used.

Required: No

Type: String

Pattern: arn:aws(-[a-z]{1,3}){0,2}:kms:([a-z]+-){2,3}\d:\d+:key/.*

Minimum: 0

Maximum: 2048

Update requires: No interruption

Encrypted

To encrypt a copy of an unencrypted snapshot when encryption by default is not enabled, enable encryption using this parameter. Copies of encrypted snapshots are encrypted, even if this parameter is false or when encryption by default is not enabled.

Required: Yes

Type: Boolean

Update requires: No interruption