# RepositoryEncryption

Indicates whether server-side encryption is enabled for the object, and whether that encryption is from the AWS Key Management Service (AWS KMS) or from Amazon S3 managed encryption (SSE-S3).

- Source: [`aws-ecr/lib/repository.ts`](https://github.com/aws/aws-cdk/blob/v2.274.0/packages/aws-cdk-lib/aws-ecr/lib/repository.ts#L1221)
- Type last changed: v2.182.0 · 5 Mar 2025

## Example

```ts
new ecr.Repository(this, 'Repo', {
  encryption: ecr.RepositoryEncryption.KMS
});
```

## Properties

- `AES_256`: [RepositoryEncryption](/cdk/api/v2/docs/aws-cdk-lib.aws_ecr.RepositoryEncryption.html) (required) (static) — 'AES256'.

- `KMS`: [RepositoryEncryption](/cdk/api/v2/docs/aws-cdk-lib.aws_ecr.RepositoryEncryption.html) (required) (static) — 'KMS'.

- `KMS_DSSE`: [RepositoryEncryption](/cdk/api/v2/docs/aws-cdk-lib.aws_ecr.RepositoryEncryption.html) (required) (static) — 'KMS_DSSE'.

- `value`: string (required) — the string value of the encryption.