This is the new *Amazon CloudFormation Template Reference Guide*. Please update your bookmarks and links. For help getting started with CloudFormation, see the [Amazon CloudFormation User Guide](https://docs.amazonaws.cn/AWSCloudFormation/latest/UserGuide/Welcome.html).

# AWS::MediaConnect::FlowOutput Encryption
<a name="aws-properties-mediaconnect-flowoutput-encryption"></a>

 Encryption information.

## Syntax
<a name="aws-properties-mediaconnect-flowoutput-encryption-syntax"></a>

To declare this entity in your Amazon CloudFormation template, use the following syntax:

### JSON
<a name="aws-properties-mediaconnect-flowoutput-encryption-syntax.json"></a>

```
{
  "[Algorithm](#cfn-mediaconnect-flowoutput-encryption-algorithm)" : String,
  "[KeyType](#cfn-mediaconnect-flowoutput-encryption-keytype)" : String,
  "[RoleArn](#cfn-mediaconnect-flowoutput-encryption-rolearn)" : String,
  "[SecretArn](#cfn-mediaconnect-flowoutput-encryption-secretarn)" : String
}
```

### YAML
<a name="aws-properties-mediaconnect-flowoutput-encryption-syntax.yaml"></a>

```
  [Algorithm](#cfn-mediaconnect-flowoutput-encryption-algorithm): String
  [KeyType](#cfn-mediaconnect-flowoutput-encryption-keytype): String
  [RoleArn](#cfn-mediaconnect-flowoutput-encryption-rolearn): String
  [SecretArn](#cfn-mediaconnect-flowoutput-encryption-secretarn): String
```

## Properties
<a name="aws-properties-mediaconnect-flowoutput-encryption-properties"></a>

`Algorithm`  <a name="cfn-mediaconnect-flowoutput-encryption-algorithm"></a>
The type of algorithm that is used for static key encryption (such as aes128, aes192, or aes256). If you are using SPEKE or SRT-password encryption, this property must be left blank.  
*Required*: No  
*Type*: String  
*Allowed values*: `aes128 | aes192 | aes256`  
*Update requires*: [No interruption](https://docs.amazonaws.cn/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

`KeyType`  <a name="cfn-mediaconnect-flowoutput-encryption-keytype"></a>
The type of key that is used for the encryption. If you don't specify a `keyType` value, the service uses the default setting (`static-key`). Valid key types are: `static-key`, `speke`, and `srt-password`.   
*Required*: No  
*Type*: String  
*Allowed values*: `static-key | srt-password`  
*Update requires*: [No interruption](https://docs.amazonaws.cn/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

`RoleArn`  <a name="cfn-mediaconnect-flowoutput-encryption-rolearn"></a>
 The ARN of the role that you created during setup (when you set up MediaConnect as a trusted entity).  
*Required*: Yes  
*Type*: String  
*Pattern*: `^arn:(aws[a-zA-Z-]*):iam::[0-9]{12}:role/[a-zA-Z0-9_+=,.@-]+$`  
*Update requires*: [No interruption](https://docs.amazonaws.cn/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

`SecretArn`  <a name="cfn-mediaconnect-flowoutput-encryption-secretarn"></a>
 The ARN of the secret that you created in Amazon Secrets Manager to store the encryption key. This parameter is required for static key encryption and is not valid for SPEKE encryption.  
*Required*: Yes  
*Type*: String  
*Pattern*: `^arn:(aws[a-zA-Z-]*):secretsmanager:[a-z0-9-]+:[0-9]{12}:secret:[a-zA-Z0-9/_+=.@-]+$`  
*Update requires*: [No interruption](https://docs.amazonaws.cn/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)