# EncryptionConfiguration

Encryption Configuration of the S3 bucket.

- Source: [`aws-stepfunctions-tasks/lib/athena/start-query-execution.ts`](https://github.com/aws/aws-cdk/blob/v2.275.0/packages/aws-cdk-lib/aws-stepfunctions-tasks/lib/athena/start-query-execution.ts#L323)

## Example

```ts
const startQueryExecutionJob = new tasks.AthenaStartQueryExecution(this, 'Start Athena Query', {
  queryString: sfn.JsonPath.stringAt('$.queryString'),
  queryExecutionContext: {
    databaseName: 'mydatabase',
  },
  resultConfiguration: {
    encryptionConfiguration: {
      encryptionOption: tasks.EncryptionOption.S3_MANAGED,
    },
    outputLocation: {
      bucketName: 'amzn-s3-demo-bucket',
      objectKey: 'folder',
    },
  },
  executionParameters: ['param1', 'param2'],
});
```

## Properties

- `encryptionKey`: [IKey](/cdk/api/v2/docs/aws-cdk-lib.aws_kms.IKey.html) — KMS key ARN or ID.

  **Default:** No KMS key for Encryption Option SSE_S3 and default master key for Encryption Option SSE_KMS and CSE_KMS

- `encryptionOption`: [EncryptionOption](/cdk/api/v2/docs/aws-cdk-lib.aws_stepfunctions_tasks.EncryptionOption.html) (required) = EncryptionOption.S3_MANAGED — Type of S3 server-side encryption enabled.