Define the KMS key ID for encryption at rest. This policy defines the specific customer managed key that should be used for resource encryption. It will be evaluated when the Encryption at Rest Level policy is set to &quot;Encryption at Rest &gt; Customer Managed Key&quot;. Please make sure the key defined has required permissions for the resource. ``` example: alias/aws/ebs ddc06e04-ce5f-4995-c758-c2b6c510e8fd arn:aws:kms:us-east-1:123456789012:key/ddc06e04-ce5f-4995-b758-c2b6c510e8fd arn:aws:kms:us-east-1:123456789012:alias/aws/ebs ```

Azure > Management Group

Azure > Subscription

Azure > Tenant

Turbot > Folder

Turbot

Turbot > IAM > Turbot Identity

Turbot > IAM > Unidentified Identity

Azure > Active Directory > Directory

Kubernetes > Cluster

AWS > Account

GitHub > Repository

ServiceNow > Instance

GCP > Project

AWS > Directory Service > Directory

AWS > Data Pipeline > Pipeline [Deprecated]

AWS > Region

AWS > EC2 > Instance

GCP > Folder

Azure > Resource Group

AWS > ECR > Repository > Allowed > Encryption at Rest

Define the KMS key ID for encryption at rest.&#92;n&#92;nThis policy defines the specific customer managed key that should be used for resource encryption. It will be evaluated when the Encryption at Rest Level policy is set to &quot;Encryption at Rest &gt; Customer Managed Key&quot;.&#92;n&#92;nPlease make sure the key defined has required permissions for the resource.&#92;n&#92;n```&#92;nexample:&#92;n  alias/aws/ebs&#92;n  ddc06e04-ce5f-4995-c758-c2b6c510e8fd&#92;n  arn:aws:kms:us-east-1:123456789012:key/ddc06e04-ce5f-4995-b758-c2b6c510e8fd&#92;n  arn:aws:kms:us-east-1:123456789012:alias/aws/ebs&#92;n```&#92;n

AWS > ECR > Repository > Allowed > Encryption at Rest > Level

AWS > ECR > Repository

AWS > ECR > Repository > Allowed > Encryption at Rest > Level > Customer Managed Key

Default template	`{{ $.defaultKey }}`
Default template input	`\| { defaultKey: policy(uri: "aws-kms#/policy/types/keyDefaultCustomerManagedKey") }`

Policy: AWS > ECR > Repository > Allowed > Encryption at Rest > Level > Customer Managed Key

Targets

Primary Policy

Controls

Policy Specification

Category

In Your Workspace

Developers