cmkSecretConfig
Specifies configuration information for a DataSync-managed secret, which includes the SecretKey
that DataSync uses to access a specific object storage location, with a customer-managed KMS key.
When you include this paramater as part of a CreateLocationObjectStorage
request, you provide only the KMS key ARN. DataSync uses this KMS key together with the value you specify for the SecretKey
parameter to create a DataSync-managed secret to store the location access credentials.
Make sure the DataSync has permission to access the KMS key that you specify.
You can use either CmkSecretConfig
(with SecretKey
) or CustomSecretConfig
(without SecretKey
) to provide credentials for a CreateLocationObjectStorage
request. Do not provide both parameters for the same request.