---
title: "GET /configuration/account/encryption"
method: GET
path: "/configuration/account/encryption"
---

# GET /configuration/account/encryption

`GET /configuration/account/encryption`

Retrieves information about the default encryption configuration for the Amazon Web Services account in the default or specified Region. For more information, see <a href="https://docs.aws.amazon.com/iot-sitewise/latest/userguide/key-management.html">Key management</a> in the <i>IoT SiteWise User Guide</i>.

## Response `200`

Success

- DescribeDefaultEncryptionConfigurationResponse
  - `encryptionType` 'SITEWISE_DEFAULT_ENCRYPTION' | 'KMS_BASED_ENCRYPTION', required — The type of encryption used for the encryption configuration.
  - `kmsKeyArn` string — The key ARN of the customer managed key used for KMS encryption if you use <code>KMS_BASED_ENCRYPTION</code>.
  - `configurationStatus` object, required — The status of the account configuration. This contains the <code>ConfigurationState</code>. If there's an error, it also contains the <code>ErrorDetails</code>.
    - `state` 'ACTIVE' | 'UPDATE_IN_PROGRESS' | 'UPDATE_FAILED', required — The current state of the configuration.
    - `error` object — Contains associated error information, if any.
      - `code` 'VALIDATION_ERROR' | 'INTERNAL_FAILURE', required — The error code.
      - `message` string, required — The error message.

## Other responses

- `480` — InvalidRequestException
- `481` — InternalFailureException
- `482` — ThrottlingException

---

[API](https://skmtc.net/aws/apis/iotsitewise.md) · [All operations](https://skmtc.net/aws/apis/iotsitewise/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/aws/iotsitewise/versions/d13e5d3e0a6f/schema)