AWS::KinesisFirehose::DeliveryStream KMSEncryptionConfig - Amazon CloudFormation
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

AWS::KinesisFirehose::DeliveryStream KMSEncryptionConfig

The KMSEncryptionConfig property type specifies the Amazon Key Management Service (Amazon KMS) encryption key that Amazon Simple Storage Service (Amazon S3) uses to encrypt data delivered by the Amazon Kinesis Data Firehose (Kinesis Data Firehose) stream.

Syntax

To declare this entity in your Amazon CloudFormation template, use the following syntax:

JSON

{ "AWSKMSKeyARN" : String }

YAML

AWSKMSKeyARN: String

Properties

AWSKMSKeyARN

The Amazon Resource Name (ARN) of the Amazon KMS encryption key that Amazon S3 uses to encrypt data delivered by the Kinesis Data Firehose stream. The key must belong to the same region as the destination S3 bucket.

Required: Yes

Type: String

Pattern: arn:.*

Minimum: 1

Maximum: 512

Update requires: No interruption