CmdID / aws / aws kinesis
aws kinesis start-stream-encryption
Enables or updates server-side encryption using an Amazon Web Services KMS key for a specified stream. AWS CLI reference
1 example 5 options Its page in the AWS CLI reference
Examples
To enable data stream encryption
The following start-stream-encryption example enables server-side encryption for the specified stream, using the specified AWS KMS key.
aws kinesis start-stream-encryption --encryption-type KMS --key-id arn:aws:kms:us-west-2:123456789012:key/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111 --stream-name samplestreamIdentify--encryption-typeThe encryption type to use.--key-idThe GUID for the customer-managed Amazon Web Services KMS key to use for encryption.--stream-nameThe name of the stream for which to start encrypting records.This command produces no output.
For more information, see Data Protection in Amazon Kinesis Data Streams in the Amazon Kinesis Data Streams Developer Guide.
Options
--encryption-typeThe encryption type to use.--key-idThe GUID for the customer-managed Amazon Web Services KMS key to use for encryption.--stream-arnThe ARN of the stream.--stream-idNot Implemented.--stream-nameThe name of the stream for which to start encrypting records.