Module Values.KmsEncryptionSettingsSource

A structure that contains the KMS encryption configuration for the policy store. The encryption settings determine what customer-managed KMS key will be used to encrypt all resources within the policy store, and any user-defined context key-value pairs to append during encryption processes. This data type is used as a field that is part of the EncryptionSettings type.

Sourcetype nonrec t = {
  1. key : KmsKey.t;
    (*

    The customer-managed KMS key Amazon Resource Name (ARN), alias or ID to be used for encryption processes. Users can provide the full KMS key ARN, a KMS key alias, or a KMS key ID, but it will be mapped to the full KMS key ARN after policy store creation, and referenced when encrypting child resources.

    *)
  2. encryptionContext : EncryptionContext.t option;
    (*

    User-defined, additional context to be added to encryption processes.

    *)
}
Sourceval context_ : string
Sourceval make : ?encryptionContext:??? -> key:KmsKey.t -> unit -> t
Sourceval to_value : t -> [> `Structure of (string * [> `Map of ([> `String of EncryptionContextKey.t ] * [> `String of EncryptionContextValue.t ]) list | `String of KmsKey.t ]) list ]
Sourceval to_query : t -> Awso.Client.Query.t
Sourceval of_xml : Awso.Xml.t -> t
Sourceval of_string : string -> t
Sourceval of_json : Yojson.Safe.t -> t
Sourceval to_json : t -> Yojson.Safe.t