#38618·aws-cdk

aws-dsql-alpha: Allow setting encryptionKey

Author: WtfJokeCreated Aug 21, 2026Updated Sep 18, 2026
Labelsp2feature-request@aws-cdk/aws-kmseffort/smallmixins

Describe the feature

Allow setting (kms)encryptionKey on dsql.Cluster like

typescript
const cluster = new dsl.Cluster(scope, "DsqlCluster", {
        clusterName: "myClusterName"
        deletionProtection: true,
        encryptionKey: myEncryptionKey
});

Use Case

Currently we need to either use L1 (cfn) construct for creating a dsql cluster or use an escape hatch of the L2 Cluster construct. If we use a dedicated L2 construct library, I would expect to make it possible to use your own encryption key.

Proposed Solution

Add new property encryptionKey to ClusterProps and set it on the underlying CfnCluster (the same way like deletionProtection currently)

Other Information

No response

Acknowledgements

  • I may be able to implement this feature request
  • This feature might incur a breaking change

AWS CDK Library version (aws-cdk-lib)

2.262.1

AWS CDK CLI version

2.1133.0

Environment details (OS name and version, etc.)

macOS 26.6.2