interface MetadataTableEncryptionConfigurationProperty

Language	Type name
.NET	`Amazon.CDK.AWS.S3.CfnBucket.MetadataTableEncryptionConfigurationProperty`
Go	`github.com/aws/aws-cdk-go/awscdk/v2/awss3#CfnBucket_MetadataTableEncryptionConfigurationProperty`
Java	`software.amazon.awscdk.services.s3.CfnBucket.MetadataTableEncryptionConfigurationProperty`
Python	`aws_cdk.aws_s3.CfnBucket.MetadataTableEncryptionConfigurationProperty`
TypeScript	`aws-cdk-lib` » `aws_s3` » `CfnBucket` » `MetadataTableEncryptionConfigurationProperty`

The encryption settings for an S3 Metadata journal table or inventory table configuration.

Example

// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import { aws_s3 as s3 } from 'aws-cdk-lib';
const metadataTableEncryptionConfigurationProperty: s3.CfnBucket.MetadataTableEncryptionConfigurationProperty = {
  sseAlgorithm: 'sseAlgorithm',

  // the properties below are optional
  kmsKeyArn: 'kmsKeyArn',
};

Properties

Name	Type	Description
sseAlgorithm	`string`	The encryption type specified for a metadata table.
kmsKeyArn?	`string`	If server-side encryption with AWS Key Management Service ( AWS KMS ) keys (SSE-KMS) is specified, you must also specify the KMS key Amazon Resource Name (ARN).

sseAlgorithm

Type: string

The encryption type specified for a metadata table.

To specify server-side encryption with AWS Key Management Service ( AWS KMS ) keys (SSE-KMS), use the aws:kms value. To specify server-side encryption with Amazon S3 managed keys (SSE-S3), use the AES256 value.

kmsKeyArn?

Type: string (optional)

If server-side encryption with AWS Key Management Service ( AWS KMS ) keys (SSE-KMS) is specified, you must also specify the KMS key Amazon Resource Name (ARN).

You must specify a customer-managed KMS key that's located in the same Region as the general purpose bucket that corresponds to the metadata table configuration.