AWS::HealthLake::FHIRDatastore KmsEncryptionConfig - Amazon CloudFormation
SyntaxProperties
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

AWS::HealthLake::FHIRDatastore KmsEncryptionConfig

The customer-managed-key(CMK) used when creating a Data Store. If a customer owned key is not specified, an Amazon owned key will be used for encryption.

Syntax

To declare this entity in your Amazon CloudFormation template, use the following syntax:

JSON

{
  "CmkType" : String,
  "KmsKeyId" : String
}

YAML

  CmkType: String
  KmsKeyId: String

Properties

CmkType

The type of customer-managed-key(CMK) used for encryption. The two types of supported CMKs are customer owned CMKs and Amazon owned CMKs. For more information on CMK types, see KmsEncryptionConfig.

Required: Yes

Type: String

Allowed values: CUSTOMER_MANAGED_KMS_KEY | AWS_OWNED_KMS_KEY

Update requires: Replacement

KmsKeyId

The KMS encryption key id/alias used to encrypt the data store contents at rest.

Required: No

Type: String

Pattern: (arn:aws((-us-gov)|(-iso)|(-iso-b)|(-cn))?:kms:)?([a-z]{2}-[a-z]+(-[a-z]+)?-\d:)?(\d{12}:)?(((key/)?[a-zA-Z0-9-_]+)|(alias/[a-zA-Z0-9:/_-]+))

Minimum: 1

Maximum: 400

Update requires: Replacement