QueueEncryption

class aws_cdk.aws_sqs.QueueEncryption(value)

Bases: Enum

What kind of encryption to apply to this queue.

ExampleMetadata:: infused

Example:

# Use managed key
sqs.Queue(self, "Queue",
    encryption=sqs.QueueEncryption.KMS_MANAGED
)

# Use custom key
my_key = kms.Key(self, "Key")

sqs.Queue(self, "Queue",
    encryption=sqs.QueueEncryption.KMS,
    encryption_master_key=my_key
)

Attributes

KMS

Server-side encryption with a KMS key managed by the user.

If encryptionKey is specified, this key will be used, otherwise, one will be defined.

KMS_MANAGED: Server-side KMS encryption with a master key managed by SQS.

UNENCRYPTED: Messages in the queue are not encrypted.