# LogsEncryptionConfiguration
<a name="API_LogsEncryptionConfiguration"></a>

Configuration for encrypting centralized log groups. This configuration is only applied to destination log groups for which the corresponding source log groups are encrypted using Customer Managed KMS Keys.

## Contents
<a name="API_LogsEncryptionConfiguration_Contents"></a>

 ** EncryptionStrategy **   <a name="cwoa-Type-LogsEncryptionConfiguration-EncryptionStrategy"></a>
Configuration that determines the encryption strategy of the destination log groups. CUSTOMER\$1MANAGED uses the configured KmsKeyArn to encrypt newly created destination log groups.  
Type: String  
Valid Values: `CUSTOMER_MANAGED | AWS_OWNED`   
Required: Yes

 ** EncryptionConflictResolutionStrategy **   <a name="cwoa-Type-LogsEncryptionConfiguration-EncryptionConflictResolutionStrategy"></a>
Conflict resolution strategy for centralization if the encryption strategy is set to CUSTOMER\$1MANAGED and the destination log group is encrypted with an AWS\$1OWNED KMS Key. ALLOW lets centralization go through while SKIP prevents centralization into the destination log group.  
Type: String  
Valid Values: `ALLOW | SKIP`   
Required: No

 ** KmsKeyArn **   <a name="cwoa-Type-LogsEncryptionConfiguration-KmsKeyArn"></a>
KMS Key ARN belonging to the primary destination account and region, to encrypt newly created central log groups in the primary destination.  
Type: String  
Length Constraints: Minimum length of 1. Maximum length of 1011.  
Pattern: `arn:aws([a-z0-9\-]+)?:([a-zA-Z0-9\-]+):([a-z0-9\-]+)?:([0-9]{12})?:(.+)`   
Required: No

## See Also
<a name="API_LogsEncryptionConfiguration_SeeAlso"></a>

For more information about using this API in one of the language-specific AWS SDKs, see the following:
+  [AWS SDK for C\$1\$1](https://docs.aws.amazon.com/goto/SdkForCpp/observabilityadmin-2018-05-10/LogsEncryptionConfiguration) 
+  [AWS SDK for Java V2](https://docs.aws.amazon.com/goto/SdkForJavaV2/observabilityadmin-2018-05-10/LogsEncryptionConfiguration) 
+  [AWS SDK for Ruby V3](https://docs.aws.amazon.com/goto/SdkForRubyV3/observabilityadmin-2018-05-10/LogsEncryptionConfiguration)