Skip to content

aws-dsql-alpha: Allow setting encryptionKey #38618

Description

@WtfJoke

Describe the feature

Allow setting (kms)encryptionKey on dsql.Cluster like

const cluster = new dsl.Cluster(scope, "DsqlCluster", {
        clusterName: "myClusterName"
        deletionProtection: true,
        encryptionKey: myEncryptionKey
});

Use Case

Currently we need to either use L1 (cfn) construct for creating a dsql cluster or use an escape hatch of the L2 Cluster construct. If we use a dedicated L2 construct library, I would expect to make it possible to use your own encryption key.

Proposed Solution

Add new property encryptionKey to ClusterProps and set it on the underlying CfnCluster (the same way like deletionProtection currently)

Other Information

No response

Acknowledgements

  • I may be able to implement this feature request
  • This feature might incur a breaking change

AWS CDK Library version (aws-cdk-lib)

2.262.1

AWS CDK CLI version

2.1133.0

Environment details (OS name and version, etc.)

macOS 26.6.2

Metadata

Metadata

Assignees

No one assigned

    Labels

    @aws-cdk/aws-kmsRelated to AWS Key Managementfeature-requestA feature should be added or improved.needs-triageThis issue or PR still needs to be triaged.

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions