enum TableEncryption

Language	Type name
.NET	Amazon.CDK.AWS.DynamoDB.TableEncryption
Go	github.com/aws/aws-cdk-go/awscdk/v2/awsdynamodb#TableEncryption
Java	software.amazon.awscdk.services.dynamodb.TableEncryption
Python	aws_cdk.aws_dynamodb.TableEncryption
TypeScript (source)	aws-cdk-lib » aws_dynamodb » TableEncryption

What kind of server-side encryption to apply to this table.

Members

Name	Description
DEFAULT	Server-side KMS encryption with a master key owned by AWS.
CUSTOMER_MANAGED	Server-side KMS encryption with a customer master key managed by customer.
AWS_MANAGED	Server-side KMS encryption with a master key managed by AWS.

---

DEFAULT

Server-side KMS encryption with a master key owned by AWS.

---

CUSTOMER_MANAGED

Server-side KMS encryption with a customer master key managed by customer.

If encryptionKey is specified, this key will be used, otherwise, one will be defined.

NOTE: if encryptionKey is not specified and the Table construct creates a KMS key for you, the key will be created with default permissions. If you are using CDKv2, these permissions will be sufficient to enable the key for use with DynamoDB tables. If you are using CDKv1, make sure the feature flag @aws-cdk/aws-kms:defaultKeyPolicies is set to true in your cdk.json.

---

AWS_MANAGED

Server-side KMS encryption with a master key managed by AWS.