---
title: "PUT /v2/domains/{domainIdentifier}/data-export-configuration"
method: PUT
path: "/v2/domains/{domainIdentifier}/data-export-configuration"
---

# PUT /v2/domains/{domainIdentifier}/data-export-configuration

`PUT /v2/domains/{domainIdentifier}/data-export-configuration`

Creates data export configuration details.

If you want to temporarily disable export and later re-enable it for the same domain, use the `--no-enable-export` flag to disable and the `--enable-export` flag to re-enable. This preserves the configuration and allows you to re-enable export without deleting S3 table.

You can enable asset metadata export for only one domain per account per Region. To enable export for a different domain, complete the following steps:

1.  Delete the export configuration for the currently enabled domain using the DeleteDataExportConfiguration operation.
    
2.  Delete the asset S3 table under the aws-sagemaker-catalog S3 table bucket. We recommend backing up the S3 table before deletion.
    
3.  Call the PutDataExportConfiguration API to enable export for the new domain.

## Path parameters

- `domainIdentifier` string, required

## Request body

- object
  - `enableExport` boolean, required — Specifies that the export is to be enabled as part of creating data export configuration details.
  - `encryptionConfiguration` object — The encryption configuration details.
    - `kmsKeyArn` string — The Amazon Resource Name (ARN) of the KMS key to use for encryption. This field is required only when <code>sseAlgorithm</code> is set to <code>aws:kms</code>.
    - `sseAlgorithm` string — The server-side encryption algorithm to use. Valid values are AES256 for S3-managed encryption keys, or aws:kms for Amazon Web Services KMS-managed encryption keys. If you choose SSE-KMS encryption you must grant the S3 Tables maintenance principal access to your KMS key. For more information, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-tables-kms-permissions.html">Permissions requirements for S3 Tables SSE-KMS encryption</a>.
  - `clientToken` string — A unique, case-sensitive identifier to ensure idempotency of the request. This field is automatically populated if not provided.

## Response `200`

Success

- PutDataExportConfigurationOutput

## Other responses

- `480` — InternalServerException
- `481` — ResourceNotFoundException
- `482` — AccessDeniedException
- `483` — ThrottlingException
- `484` — ServiceQuotaExceededException
- `485` — ConflictException
- `486` — ValidationException
- `487` — UnauthorizedException

---

[API](https://skmtc.net/aws/apis/datazone.md) · [All operations](https://skmtc.net/aws/apis/datazone/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/aws/datazone/versions/055599054b53/schema)