AwsMskClusterClusterInfoEncryptionInfoEncryptionAtRestDetails - AWS Security Hub CSPM
This documentation is a draft for private preview for regions in the AWS European Sovereign Cloud. Documentation content will continue to evolve. Published: January 14, 2026.

AwsMskClusterClusterInfoEncryptionInfoEncryptionAtRestDetails

The data-volume encryption details. You can't update encryption at rest settings for existing clusters.

Contents

DataVolumeKMSKeyId

The Amazon Resource Name (ARN) of the AWS KMS key for encrypting data at rest. If you don't specify a KMS key, MSK creates one for you and uses it.

Type: String

Pattern: .*\S.*

Required: No

See Also

For more information about using this API in one of the language-specific AWS SDKs, see the following: