enabled
Parameters
value
Whether or not to enable encryption at rest using an AWS managed KMS customer master key (CMK). If enabled
is false
then server-side encryption is set to AWS-owned key (shown as DEFAULT
in the AWS console). Potentially confusingly, if enabled
is true
and no kms_key_arn
is specified then server-side encryption is set to the default KMS-managed key (shown as KMS
in the AWS console). The AWS KMS documentation explains the difference between AWS-owned and KMS-managed keys.