AWS::Cassandra::Table EncryptionSpecification - AWS CloudFormation

AWS::Cassandra::Table EncryptionSpecification

Specifies the encryption at rest option selected for the table.

Syntax

To declare this entity in your AWS CloudFormation template, use the following syntax:

JSON

{ "EncryptionType" : String, "KmsKeyIdentifier" : String }

YAML

EncryptionType: String KmsKeyIdentifier: String

Properties

EncryptionType

The encryption at rest options for the table.

  • AWS owned key (default) - AWS_OWNED_KMS_KEY

  • Customer managed key - CUSTOMER_MANAGED_KMS_KEY

    Important

    If you choose CUSTOMER_MANAGED_KMS_KEY, a kms_key_identifier in the format of a key ARN is required.

Valid values: CUSTOMER_MANAGED_KMS_KEY | AWS_OWNED_KMS_KEY.

Required: Yes

Type: String

Allowed values: AWS_OWNED_KMS_KEY | CUSTOMER_MANAGED_KMS_KEY

Update requires: No interruption

KmsKeyIdentifier

Requires a kms_key_identifier in the format of a key ARN.

Required: No

Type: String

Update requires: No interruption