AWS::DLM::LifecyclePolicy EncryptionConfiguration - Amazon CloudFormation
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

AWS::DLM::LifecyclePolicy EncryptionConfiguration

[Event-based policies only] Specifies the encryption settings for cross-Region snapshot copies created by event-based policies.

Syntax

To declare this entity in your Amazon CloudFormation template, use the following syntax:

JSON

{ "CmkArn" : String, "Encrypted" : Boolean }

YAML

CmkArn: String Encrypted: Boolean

Properties

CmkArn

The Amazon Resource Name (ARN) of the Amazon KMS key to use for EBS encryption. If this parameter is not specified, the default KMS key for the account is used.

Required: No

Type: String

Pattern: arn:aws(-[a-z]{1,3}){0,2}:kms:([a-z]+-){2,3}\d:\d+:key/.*

Minimum: 0

Maximum: 2048

Update requires: No interruption

Encrypted

To encrypt a copy of an unencrypted snapshot when encryption by default is not enabled, enable encryption using this parameter. Copies of encrypted snapshots are encrypted, even if this parameter is false or when encryption by default is not enabled.

Required: Yes

Type: Boolean

Update requires: No interruption