/AWS1/CL_DSYCMKSECRETCONFIG

Specifies configuration information for a DataSync-managed secret, such as an authentication token or secret key that DataSync uses to access a specific storage location, with a customer-managed KMS key.

You can use either CmkSecretConfig or CustomSecretConfig to provide credentials for a CreateLocation request. Do not provide both parameters for the same request.

CONSTRUCTOR

IMPORTING

Optional arguments:

iv_secretarn TYPE /AWS1/DSYSECRETARN /AWS1/DSYSECRETARN

Specifies the ARN for the DataSync-managed Secrets Manager secret that that is used to access a specific storage location. This property is generated by DataSync and is read-only. DataSync encrypts this secret with the KMS key that you specify for KmsKeyArn.

iv_kmskeyarn TYPE /AWS1/DSYKMSKEYARN /AWS1/DSYKMSKEYARN

Specifies the ARN for the customer-managed KMS key that DataSync uses to encrypt the DataSync-managed secret stored for SecretArn. DataSync provides this key to Secrets Manager.

---

Queryable Attributes

SecretArn

Specifies the ARN for the DataSync-managed Secrets Manager secret that that is used to access a specific storage location. This property is generated by DataSync and is read-only. DataSync encrypts this secret with the KMS key that you specify for KmsKeyArn.

Accessible with the following methods

Method	Description
GET_SECRETARN()	Getter for SECRETARN, with configurable default
ASK_SECRETARN()	Getter for SECRETARN w/ exceptions if field has no value
HAS_SECRETARN()	Determine if SECRETARN has a value

KmsKeyArn

Specifies the ARN for the customer-managed KMS key that DataSync uses to encrypt the DataSync-managed secret stored for SecretArn. DataSync provides this key to Secrets Manager.

Accessible with the following methods

Method	Description
GET_KMSKEYARN()	Getter for KMSKEYARN, with configurable default
ASK_KMSKEYARN()	Getter for KMSKEYARN w/ exceptions if field has no value
HAS_KMSKEYARN()	Determine if KMSKEYARN has a value