CmkSecretConfig
Specifies configuration information for a DataSync-managed secret, such as an authentication token, secret key, password, or Kerberos keytab that DataSync uses to access a specific storage location, with a customer-managed AWS KMS key.
Note
You can use either CmkSecretConfig or CustomSecretConfig to
provide credentials for a CreateLocation request. Do not provide both
parameters for the same request.
Contents
- KmsKeyArn
-
Specifies the ARN for the customer-managed AWS KMS key that DataSync uses to encrypt the DataSync-managed secret stored for
SecretArn. DataSync provides this key to AWS Secrets Manager.Type: String
Length Constraints: Maximum length of 2048.
Pattern:
^(arn:(aws|aws-cn|aws-us-gov|aws-eusc|aws-iso|aws-iso-b):kms:[a-z\-0-9]+:[0-9]{12}:key/.*|)$Required: No
- SecretArn
-
Specifies the ARN for the DataSync-managed AWS Secrets Manager secret that that is used to access a specific storage location. This property is generated by DataSync and is read-only. DataSync encrypts this secret with the KMS key that you specify for
KmsKeyArn.Type: String
Length Constraints: Maximum length of 2048.
Pattern:
^(arn:(aws|aws-cn|aws-us-gov|aws-eusc|aws-iso|aws-iso-b):secretsmanager:[a-z\-0-9]+:[0-9]{12}:secret:.*|)$Required: No
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following: