cloudwatch_associate_dataset_kms_key: Associates an Amazon Web Services Key Management Service...

In paws.management: 'Amazon Web Services' Management & Governance Services

Associates an Amazon Web Services Key Management Service (Amazon Web Services KMS) customer managed key with the specified dataset

Description

Associates an Amazon Web Services Key Management Service (Amazon Web Services KMS) customer managed key with the specified dataset. After this operation completes, all data published to the dataset is encrypted at rest using the specified KMS key. Callers must have kms:Decrypt permission on the key to read the encrypted data.

See https://www.paws-r-sdk.com/docs/cloudwatch_associate_dataset_kms_key/ for full documentation.

Usage

cloudwatch_associate_dataset_kms_key(DatasetIdentifier, KmsKeyArn)

Arguments

DatasetIdentifier

[required] Specifies the identifier of the dataset that you want to associate the KMS key with. For the default dataset, you can specify either default or the full dataset Amazon Resource Name (ARN) in the format arn:aws:cloudwatch:Region:account-id:dataset/default.

KmsKeyArn

[required] Specifies the Amazon Resource Name (ARN) of the customer managed KMS key to associate with the dataset. The key must be a symmetric encryption KMS key (SYMMETRIC_DEFAULT) in the same Amazon Web Services Region as the dataset. The ARN must be in the format arn:aws:kms:Region:account-id:key/key-id . Key IDs, aliases, and alias ARNs are not accepted. For more information about KMS key ARNs, see Key ARN in the Amazon Web Services Key Management Service Developer Guide.

paws.management documentation built on Oct. 8, 2026, 1:25 a.m.