aws-cdk-lib.aws_datasync.CfnLocationAzureBlob.CmkSecretConfigProperty

CmkSecretConfigProperty Struct

Specifies configuration information for a DataSync-managed secret, such as an authentication token, secret key, password, or Kerberos keytab that DataSync uses to access a specific storage location, with a customer-managed AWS KMS key .

You can use either CmkSecretConfig or CustomSecretConfig to provide credentials for a CreateLocation request. Do not provide both parameters for the same request.

Source

Generated code

Type last changed

v2.198.0 · 23 May 2025

Example

// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import { aws_datasync as datasync } from 'aws-cdk-lib';
const cmkSecretConfigProperty: datasync.CfnLocationAzureBlob.CmkSecretConfigProperty = {
  kmsKeyArn: 'kmsKeyArn',
  secretArn: 'secretArn',
};

Properties

kmsKeyArn?optionalstringkms_key_arn?optionalstrkmsKeyArn?optionalStringKmsKeyArn?optionalstringKmsKeyArn?optional*string#

Specifies the ARN for the customer-managed AWS KMS key that DataSync uses to encrypt the DataSync-managed secret stored for `SecretArn` .

DataSync provides this key to AWS Secrets Manager .

secretArn?optionalstringsecret_arn?optionalstrsecretArn?optionalStringSecretArn?optionalstringSecretArn?optional*string#

Specifies the ARN for the DataSync-managed AWS Secrets Manager secret that that is used to access a specific storage location.

This property is generated by DataSync and is read-only. DataSync encrypts this secret with the KMS key that you specify for KmsKeyArn .