This is the new Amazon CloudFormation Template Reference Guide. Please update your bookmarks and links. For help getting started with CloudFormation, see the Amazon CloudFormation User Guide.
AWS::AIOps::InvestigationGroup EncryptionConfigMap
Use this structure if you want to use a customer managed Amazon KMS key to encrypt your investigation data. If you omit this parameter, CloudWatch investigations will use an Amazon key to encrypt the data. For more information, see Encryption of investigation data.
Syntax
To declare this entity in your Amazon CloudFormation template, use the following syntax:
JSON
{ "EncryptionConfigurationType" :
String
, "KmsKeyId" :String
}
YAML
EncryptionConfigurationType:
String
KmsKeyId:String
Properties
EncryptionConfigurationType
-
Displays whether investigation data is encrypted by a customer managed key or an Amazon owned key.
Required: No
Type: String
Minimum:
1
Maximum:
128
Update requires: No interruption
KmsKeyId
-
If the investigation group uses a customer managed key for encryption, this field displays the ID of that key.
Required: No
Type: String
Minimum:
1
Maximum:
256
Update requires: No interruption