aws-dsql-alpha: Allow setting encryptionKey
Author: WtfJokeCreated Aug 21, 2026Updated Sep 18, 2026
Labelsp2feature-request@aws-cdk/aws-kmseffort/smallmixins
Describe the feature
Allow setting (kms)encryptionKey on dsql.Cluster like
const cluster = new dsl.Cluster(scope, "DsqlCluster", {
clusterName: "myClusterName"
deletionProtection: true,
encryptionKey: myEncryptionKey
});Use Case
Currently we need to either use L1 (cfn) construct for creating a dsql cluster or use an escape hatch of the L2 Cluster construct. If we use a dedicated L2 construct library, I would expect to make it possible to use your own encryption key.
Proposed Solution
Add new property encryptionKey to ClusterProps and set it on the underlying CfnCluster (the same way like deletionProtection currently)
Other Information
No response
Acknowledgements
- I may be able to implement this feature request
- This feature might incur a breaking change
AWS CDK Library version (aws-cdk-lib)
2.262.1
AWS CDK CLI version
2.1133.0
Environment details (OS name and version, etc.)
macOS 26.6.2
Source: aws/aws-cdk