This is the new AWS CloudFormation Template Reference Guide. Please update your bookmarks and links. For help getting started with CloudFormation, see the AWS CloudFormation User Guide.
AWS::AIOps::InvestigationGroup EncryptionConfigMap
Use this structure if you want to use a customer managed AWS KMS key to encrypt your investigation data. If you omit this parameter, CloudWatch investigations will use an AWS key to encrypt the data. For more information, see Encryption of investigation data.
Syntax
To declare this entity in your AWS CloudFormation template, use the following syntax:
JSON
{ "EncryptionConfigurationType" :
String
, "KmsKeyId" :String
}
YAML
EncryptionConfigurationType:
String
KmsKeyId:String
Properties
EncryptionConfigurationType
-
Displays whether investigation data is encrypted by a customer managed key or an AWS owned key.
Required: No
Type: String
Minimum:
1
Maximum:
128
Update requires: No interruption
KmsKeyId
-
If the investigation group uses a customer managed key for encryption, this field displays the ID of that key.
Required: No
Type: String
Minimum:
1
Maximum:
256
Update requires: No interruption