AWS::AIOps::InvestigationGroup EncryptionConfigMap - Amazon CloudFormation
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

This is the new Amazon CloudFormation Template Reference Guide. Please update your bookmarks and links. For help getting started with CloudFormation, see the Amazon CloudFormation User Guide.

AWS::AIOps::InvestigationGroup EncryptionConfigMap

Use this structure if you want to use a customer managed Amazon KMS key to encrypt your investigation data. If you omit this parameter, CloudWatch investigations will use an Amazon key to encrypt the data. For more information, see Encryption of investigation data.

Syntax

To declare this entity in your Amazon CloudFormation template, use the following syntax:

JSON

{ "EncryptionConfigurationType" : String, "KmsKeyId" : String }

Properties

EncryptionConfigurationType

Displays whether investigation data is encrypted by a customer managed key or an Amazon owned key.

Required: No

Type: String

Minimum: 1

Maximum: 128

Update requires: No interruption

KmsKeyId

If the investigation group uses a customer managed key for encryption, this field displays the ID of that key.

Required: No

Type: String

Minimum: 1

Maximum: 256

Update requires: No interruption