{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://catalog.lintel.tools/schemas/schemastore/serverless-framework-configuration/_shared/latest--mongodb-atlas-encryptionatrest.json",
  "title": "MongoDBAtlasEncryptionAtRestProperties",
  "description": "Returns and edits the Encryption at Rest using Customer Key Management configuration.. Source:- No source definition found, add manually please",
  "x-lintel": {
    "source": "https://raw.githubusercontent.com/lalcebo/json-schema/master/serverless/resources/cloudformation-modified/mongodb-atlas-encryptionatrest.json",
    "sourceSha256": "0b638028c068c5d6bb1ad6e19dd089455c1b0e903c3ccbd2b72a039ca0342d83"
  },
  "type": "object",
  "properties": {
    "AwsKms": {
      "$ref": "#/$defs/AwsKms"
    },
    "Profile": {
      "oneOf": [
        {
          "type": "string",
          "default": "default"
        },
        {
          "$ref": "https://catalog.lintel.tools/schemas/schemastore/serverless-framework-configuration/_shared/latest--cf.functions.json#/Aws_CF_FunctionString"
        }
      ],
      "description": "The profile is defined in AWS Secret manager. See [Secret Manager Profile setup](../../../examples/profile-secret.yaml)."
    },
    "ProjectId": {
      "oneOf": [
        {
          "type": "string"
        },
        {
          "$ref": "https://catalog.lintel.tools/schemas/schemastore/serverless-framework-configuration/_shared/latest--cf.functions.json#/Aws_CF_FunctionString"
        }
      ],
      "description": "Unique identifier of the Atlas project to which the user belongs."
    }
  },
  "typeName": "MongoDB::Atlas::EncryptionAtRest",
  "primaryIdentifier": [
    "/properties/Id",
    "/properties/ProjectId",
    "/properties/Profile"
  ],
  "additionalProperties": false,
  "readOnlyProperties": [
    "/properties/Id"
  ],
  "$defs": {
    "AwsKms": {
      "description": "Specifies AWS KMS configuration details and whether Encryption at Rest is enabled for an Atlas project.",
      "type": "object",
      "properties": {
        "RoleID": {
          "oneOf": [
            {
              "type": "string"
            },
            {
              "$ref": "https://catalog.lintel.tools/schemas/schemastore/serverless-framework-configuration/_shared/latest--cf.functions.json#/Aws_CF_FunctionString"
            }
          ],
          "description": "ID of an AWS IAM role authorized to manage an AWS customer master key."
        },
        "CustomerMasterKeyID": {
          "oneOf": [
            {
              "type": "string"
            },
            {
              "$ref": "https://catalog.lintel.tools/schemas/schemastore/serverless-framework-configuration/_shared/latest--cf.functions.json#/Aws_CF_FunctionString"
            }
          ],
          "description": "The AWS customer master key used to encrypt and decrypt the MongoDB master keys."
        },
        "Enabled": {
          "type": "boolean",
          "description": "Specifies whether Encryption at Rest is enabled for an Atlas project. To disable Encryption at Rest, pass only this parameter with a value of false. When you disable Encryption at Rest, Atlas also removes the configuration details."
        },
        "Region": {
          "oneOf": [
            {
              "type": "string"
            },
            {
              "$ref": "https://catalog.lintel.tools/schemas/schemastore/serverless-framework-configuration/_shared/latest--cf.functions.json#/Aws_CF_FunctionString"
            }
          ],
          "description": "The AWS region in which the AWS customer master key exists."
        }
      },
      "title": "MongoDBAtlasEncryptionAtRestAwsKmsDefinition",
      "additionalProperties": false
    }
  },
  "required": [
    "AwsKms",
    "ProjectId"
  ],
  "createOnlyProperties": [
    "/properties/ProjectId",
    "/properties/Profile"
  ]
}