This is the new *Amazon CloudFormation Template Reference Guide*. Please update your bookmarks and links. For help getting started with CloudFormation, see the [Amazon CloudFormation User Guide](https://docs.amazonaws.cn/AWSCloudFormation/latest/UserGuide/Welcome.html).

# AWS::MWAAServerless::Workflow EncryptionConfiguration
<a name="aws-properties-mwaaserverless-workflow-encryptionconfiguration"></a>

Configuration for encrypting workflow data at rest and in transit. Amazon Managed Workflows for Apache Airflow Serverless provides comprehensive encryption capabilities to protect sensitive workflow data, parameters, and execution logs. When using customer-managed keys, the service integrates with AmazonAmazon KMS to provide fine-grained access control and audit capabilities. Encryption is applied consistently across the distributed execution environment including task containers, metadata storage, and log streams.

## Syntax
<a name="aws-properties-mwaaserverless-workflow-encryptionconfiguration-syntax"></a>

To declare this entity in your Amazon CloudFormation template, use the following syntax:

### JSON
<a name="aws-properties-mwaaserverless-workflow-encryptionconfiguration-syntax.json"></a>

```
{
  "[KmsKeyId](#cfn-mwaaserverless-workflow-encryptionconfiguration-kmskeyid)" : {{String}},
  "[Type](#cfn-mwaaserverless-workflow-encryptionconfiguration-type)" : {{String}}
}
```

### YAML
<a name="aws-properties-mwaaserverless-workflow-encryptionconfiguration-syntax.yaml"></a>

```
  [KmsKeyId](#cfn-mwaaserverless-workflow-encryptionconfiguration-kmskeyid): {{String}}
  [Type](#cfn-mwaaserverless-workflow-encryptionconfiguration-type): {{String}}
```

## Properties
<a name="aws-properties-mwaaserverless-workflow-encryptionconfiguration-properties"></a>

`KmsKeyId`  <a name="cfn-mwaaserverless-workflow-encryptionconfiguration-kmskeyid"></a>
The ID or ARN of the Amazon KMS key to use for encryption. Required when `Type` is `CUSTOMER_MANAGED_KEY`.  
*Required*: No  
*Type*: String  
*Update requires*: [Replacement](https://docs.amazonaws.cn/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-replacement)

`Type`  <a name="cfn-mwaaserverless-workflow-encryptionconfiguration-type"></a>
The type of encryption to use. Values are `AWS_MANAGED_KEY` (Amazon manages the encryption key) or `CUSTOMER_MANAGED_KEY` (you provide a KMS key).  
*Required*: Yes  
*Type*: String  
*Allowed values*: `AWS_MANAGED_KEY | CUSTOMER_MANAGED_KEY`  
*Update requires*: [Replacement](https://docs.amazonaws.cn/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-replacement)