put_encryption_config

put_encryption_config(**kwargs)

Updates the encryption configuration for X-Ray data.

See also: AWS API Documentation

Request Syntax

response = client.put_encryption_config(
    KeyId='string',
    Type='NONE'|'KMS'
)
Parameters
  • KeyId (string) --

    An Amazon Web Services KMS key in one of the following formats:

    • Alias - The name of the key. For example, alias/MyKey .
    • Key ID - The KMS key ID of the key. For example, ae4aa6d49-a4d8-9df9-a475-4ff6d7898456 . Amazon Web Services X-Ray does not support asymmetric KMS keys.
    • ARN - The full Amazon Resource Name of the key ID or alias. For example, arn:aws:kms:us-east-2:123456789012:key/ae4aa6d49-a4d8-9df9-a475-4ff6d7898456 . Use this format to specify a key in a different account.

    Omit this key if you set Type to NONE .

  • Type (string) --

    [REQUIRED]

    The type of encryption. Set to KMS to use your own key for encryption. Set to NONE for default encryption.

Return type

dict

Returns

Response Syntax

{
    'EncryptionConfig': {
        'KeyId': 'string',
        'Status': 'UPDATING'|'ACTIVE',
        'Type': 'NONE'|'KMS'
    }
}

Response Structure

  • (dict) --

    • EncryptionConfig (dict) --

      The new encryption configuration.

      • KeyId (string) --

        The ID of the KMS key used for encryption, if applicable.

      • Status (string) --

        The encryption status. While the status is UPDATING , X-Ray may encrypt data with a combination of the new and old settings.

      • Type (string) --

        The type of encryption. Set to KMS for encryption with KMS keys. Set to NONE for default encryption.

Exceptions

  • XRay.Client.exceptions.InvalidRequestException
  • XRay.Client.exceptions.ThrottledException