# SSESpecificationProperty

Represents the settings used to enable server-side encryption.

- Source: Generated code
- Type last changed: v2.93.0 · 23 Aug 2023

## Example

```ts
// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import { aws_dynamodb as dynamodb } from 'aws-cdk-lib';
const sSESpecificationProperty: dynamodb.CfnGlobalTable.SSESpecificationProperty = {
  sseEnabled: false,

  // the properties below are optional
  sseType: 'sseType',
};
```

## Properties

- `sseEnabled`: boolean | [IResolvable](/cdk/api/v2/docs/aws-cdk-lib.IResolvable.html) (required) — Indicates whether server-side encryption is performed using an AWS managed key or an AWS owned key.

  If enabled (true), server-side encryption type is set to KMS and an AWS managed key is used ( AWS  charges apply). If disabled (false) or not specified,server-side encryption is set to an AWS owned key. If you choose to use KMS encryption, you can also use customer managed KMS keys by specifying them in the `ReplicaSpecification.SSESpecification` object. You cannot mix AWS managed and customer managed KMS keys.

- `sseType`: string — Server-side encryption type. The only supported value is:.

  - `KMS` - Server-side encryption that uses AWS Key Management Service . The key is stored in your account and is managed by AWS  ( AWS  charges apply).