AWS::Cassandra::Table EncryptionSpecification - Amazon CloudFormation
SyntaxProperties
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

AWS::Cassandra::Table EncryptionSpecification

Specifies the encryption at rest option selected for the table.

Syntax

To declare this entity in your Amazon CloudFormation template, use the following syntax:

JSON

{
  "EncryptionType" : String,
  "KmsKeyIdentifier" : String
}

YAML

  EncryptionType: String
  KmsKeyIdentifier: String

Properties

EncryptionType

The encryption at rest options for the table.

  • Amazon owned key (default) - AWS_OWNED_KMS_KEY

  • Customer managed key - CUSTOMER_MANAGED_KMS_KEY

    Important

    If you choose CUSTOMER_MANAGED_KMS_KEY, a kms_key_identifier in the format of a key ARN is required.

Valid values: CUSTOMER_MANAGED_KMS_KEY | AWS_OWNED_KMS_KEY.

Required: Yes

Type: String

Update requires: No interruption

KmsKeyIdentifier

Requires a kms_key_identifier in the format of a key ARN.

Required: No

Type: String

Update requires: No interruption