AWS::EC2::VerifiedAccessEndpoint SseSpecification - Amazon CloudFormation
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

AWS::EC2::VerifiedAccessEndpoint SseSpecification

Amazon Verified Access provides server side encryption by default to data at rest using Amazon-owned KMS keys. You also have the option of using customer managed KMS keys, which can be specified using the options below.

Syntax

To declare this entity in your Amazon CloudFormation template, use the following syntax:

JSON

{ "CustomerManagedKeyEnabled" : Boolean, "KmsKeyArn" : String }

YAML

CustomerManagedKeyEnabled: Boolean KmsKeyArn: String

Properties

CustomerManagedKeyEnabled

Enable or disable the use of customer managed KMS keys for server side encryption.

Valid values: True | False

Required: No

Type: Boolean

Update requires: No interruption

KmsKeyArn

The ARN of the KMS key.

Required: No

Type: String

Update requires: No interruption