# EncryptionOption

Encryption Options of the S3 bucket.

- Source: [`aws-stepfunctions-tasks/lib/athena/start-query-execution.ts`](https://github.com/aws/aws-cdk/blob/v2.275.0/packages/aws-cdk-lib/aws-stepfunctions-tasks/lib/athena/start-query-execution.ts#L345)

## Example

```ts
const startQueryExecutionJob = new tasks.AthenaStartQueryExecution(this, 'Start Athena Query', {
  queryString: sfn.JsonPath.stringAt('$.queryString'),
  queryExecutionContext: {
    databaseName: 'mydatabase',
  },
  resultConfiguration: {
    encryptionConfiguration: {
      encryptionOption: tasks.EncryptionOption.S3_MANAGED,
    },
    outputLocation: {
      bucketName: 'amzn-s3-demo-bucket',
      objectKey: 'folder',
    },
  },
  executionParameters: ['param1', 'param2'],
});
```

## Members

| Member | Description |
| --- | --- |
| `S3_MANAGED` | Server side encryption (SSE) with an Amazon S3-managed key. |
| `KMS` | Server-side encryption (SSE) with an AWS KMS key managed by the account owner. |
| `CLIENT_SIDE_KMS` | Client-side encryption (CSE) with an AWS KMS key managed by the account owner. |

## Referenced by

- [`EncryptionConfiguration`](/v2/docs/aws-cdk-lib.aws_stepfunctions_tasks.EncryptionConfiguration).encryptionOption