

This is the new *Amazon CloudFormation Template Reference Guide*. Please update your bookmarks and links. For help getting started with CloudFormation, see the [Amazon CloudFormation User Guide](https://docs.amazonaws.cn/AWSCloudFormation/latest/UserGuide/Welcome.html).

# AWS::S3::StorageLens SSEKMS
<a name="aws-properties-s3-storagelens-ssekms"></a>

Specifies the use of server-side encryption using an Amazon Key Management Service key (SSE-KMS) to encrypt the delivered S3 Storage Lens metrics export file.

## Syntax
<a name="aws-properties-s3-storagelens-ssekms-syntax"></a>

To declare this entity in your Amazon CloudFormation template, use the following syntax:

### JSON
<a name="aws-properties-s3-storagelens-ssekms-syntax.json"></a>

```
{
  "[KeyId](#cfn-s3-storagelens-ssekms-keyid)" : String
}
```

### YAML
<a name="aws-properties-s3-storagelens-ssekms-syntax.yaml"></a>

```
  [KeyId](#cfn-s3-storagelens-ssekms-keyid): String
```

## Properties
<a name="aws-properties-s3-storagelens-ssekms-properties"></a>

`KeyId`  <a name="cfn-s3-storagelens-ssekms-keyid"></a>
Specifies the Amazon Resource Name (ARN) of the customer managed Amazon KMS key to use for encrypting the S3 Storage Lens metrics export file. Amazon S3 only supports symmetric encryption keys. For more information, see [Special-purpose keys](https://docs.amazonaws.cn/kms/latest/developerguide/key-types.html) in the *Amazon Key Management Service Developer Guide*.  
*Required*: Yes  
*Type*: String  
*Update requires*: [No interruption](https://docs.amazonaws.cn/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)