EncryptionScope
Determines which newly created destination log groups are encrypted with the configured KMS key.
Inheritors
Types
Link copied to clipboard
Only destination log groups whose source log group is encrypted with a customer managed KMS key use the configured KmsKeyArn. This is the default behavior.
Link copied to clipboard
Every new destination log group created by this rule uses the configured KmsKeyArn, regardless of whether the source log group is encrypted with a customer managed key or Amazon Web Services owned encryption.
Link copied to clipboard