interface DeliveryStreamEncryptionConfigurationInputProperty

Language	Type name
.NET	Amazon.CDK.AWS.KinesisFirehose.CfnDeliveryStream.DeliveryStreamEncryptionConfigurationInputProperty
Java	software.amazon.awscdk.services.kinesisfirehose.CfnDeliveryStream.DeliveryStreamEncryptionConfigurationInputProperty
Python	aws_cdk.aws_kinesisfirehose.CfnDeliveryStream.DeliveryStreamEncryptionConfigurationInputProperty
TypeScript	@aws-cdk/aws-kinesisfirehose » CfnDeliveryStream » DeliveryStreamEncryptionConfigurationInputProperty

Specifies the type and Amazon Resource Name (ARN) of the CMK to use for Server-Side Encryption (SSE).

Example

// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import * as kinesisfirehose from '@aws-cdk/aws-kinesisfirehose';
const deliveryStreamEncryptionConfigurationInputProperty: kinesisfirehose.CfnDeliveryStream.DeliveryStreamEncryptionConfigurationInputProperty = {
  keyType: 'keyType',

  // the properties below are optional
  keyArn: 'keyArn',
};

Properties

Name	Type	Description
keyType	string	Indicates the type of customer master key (CMK) to use for encryption.
keyArn?	string	If you set KeyType to CUSTOMER_MANAGED_CMK , you must specify the Amazon Resource Name (ARN) of the CMK.

---

keyType

Type: string

Indicates the type of customer master key (CMK) to use for encryption.

The default setting is AWS_OWNED_CMK . For more information about CMKs, see Customer Master Keys (CMKs) .

You can use a CMK of type CUSTOMER_MANAGED_CMK to encrypt up to 500 delivery streams.

To encrypt your delivery stream, use symmetric CMKs. Kinesis Data Firehose doesn't support asymmetric CMKs. For information about symmetric and asymmetric CMKs, see About Symmetric and Asymmetric CMKs in the AWS Key Management Service developer guide.

---

keyArn?

Type: string (optional)

If you set KeyType to CUSTOMER_MANAGED_CMK , you must specify the Amazon Resource Name (ARN) of the CMK.

If you set KeyType to AWS _OWNED_CMK , Kinesis Data Firehose uses a service-account CMK.