# CmkSecretConfigProperty

Specifies configuration information for a DataSync-managed secret, such as an authentication token, secret key, password, or Kerberos keytab that DataSync uses to access a specific storage location, with a customer-managed AWS KMS key .

> You can use either `CmkSecretConfig` or `CustomSecretConfig` to provide credentials for a `CreateLocation` request. Do not provide both parameters for the same request.

- Source: Generated code
- Type last changed: v2.198.0 · 23 May 2025

## Example

```ts
// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import { aws_datasync as datasync } from 'aws-cdk-lib';
const cmkSecretConfigProperty: datasync.CfnLocationAzureBlob.CmkSecretConfigProperty = {
  kmsKeyArn: 'kmsKeyArn',
  secretArn: 'secretArn',
};
```

## Properties

- `kmsKeyArn`: string — Specifies the ARN for the customer-managed AWS KMS key that DataSync uses to encrypt the DataSync-managed secret stored for `SecretArn` .

  DataSync provides this key to AWS Secrets Manager .

- `secretArn`: string — Specifies the ARN for the DataSync-managed AWS Secrets Manager secret that that is used to access a specific storage location.

  This property is generated by DataSync and is read-only. DataSync encrypts this secret with the KMS key that you specify for `KmsKeyArn` .