View a markdown version of this page

EncryptionConfig - Amazon EKS

EncryptionConfig

The encryption configuration for the cluster.

Contents

provider

AWS Key Management Service (AWS KMS) key. Either the ARN or the alias can be used.

Type: Provider object

Required: No

resources

This member has been deprecated.

Important

Amazon EKS encrypts all Kubernetes API data with envelope encryption by default for clusters running Kubernetes version 1.28 or higher, so this field no longer affects which resources are encrypted.

Specifies the resources to be encrypted. The only supported value is secrets.

Type: Array of strings

Required: No

See Also

For more information about using this API in one of the language-specific AWS SDKs, see the following: