# EncryptedPermissionsOptions

Options for configuring permissions on encrypted resources.

Extends: EncryptedPermissionsOptions
Extends: PermissionsOptions

- Source: [`core/lib/grants.ts`](https://github.com/aws/aws-cdk/blob/v2.274.0/packages/aws-cdk-lib/core/lib/grants.ts#L16)
- Type last changed: v2.244.0 · 19 Mar 2026

## Example

```ts
// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import * as cdk from 'aws-cdk-lib';
const encryptedPermissionsOptions: cdk.EncryptedPermissionsOptions = {
  keyActions: ['keyActions'],
  resourceArns: ['resourceArns'],
};
```

## Properties

- `keyActions`: string[] — The KMS key actions to grant permissions for.

  **Default:** No permission is added to the KMS key, even if it exists

- `resourceArns`: string[] — The ARNs of the resources to grant permissions on.

  **Default:** The ARN of the resource associated with the grant is used.