# EndpointEncryptionSecretConfigurationProperty

The configuration for the Secrets Manager secret that holds the key or passphrase used to encrypt an endpoint connection.

- Source: Generated code
- Type last changed: v2.276.0 · 10 Nov 2026

## Example

```ts
// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import { aws_mediaconnect as mediaconnect } from 'aws-cdk-lib';
const endpointEncryptionSecretConfigurationProperty: mediaconnect.CfnSourceEndpoint.EndpointEncryptionSecretConfigurationProperty = {
  secretArn: 'secretArn',
};
```

## Properties

- `secretArn`: string (required) — The ARN of the Secrets Manager secret that holds the key or passphrase.

  The secret must be encrypted with a customer managed Amazon Web Services KMS key that is enabled and symmetric; it cannot use the Amazon Web Services managed key aws/secretsmanager. The secret must be in the same Amazon Web Services account and Region as the endpoint.