AWS::Cassandra::Table EncryptionSpecification
Specifies the encryption at rest option selected for the table.
Syntax
To declare this entity in your Amazon CloudFormation template, use the following syntax:
JSON
{ "EncryptionType" :
String
, "KmsKeyIdentifier" :String
}
YAML
EncryptionType:
String
KmsKeyIdentifier:String
Properties
EncryptionType
-
The encryption at rest options for the table.
-
Amazon owned key (default) -
AWS_OWNED_KMS_KEY
-
Customer managed key -
CUSTOMER_MANAGED_KMS_KEY
Important
If you choose
CUSTOMER_MANAGED_KMS_KEY
, akms_key_identifier
in the format of a key ARN is required.
Valid values:
CUSTOMER_MANAGED_KMS_KEY
|AWS_OWNED_KMS_KEY
.Required: Yes
Type: String
Allowed values:
AWS_OWNED_KMS_KEY | CUSTOMER_MANAGED_KMS_KEY
Update requires: No interruption
-
KmsKeyIdentifier
-
Requires a
kms_key_identifier
in the format of a key ARN.Required: No
Type: String
Update requires: No interruption