Enable CMEK For Cloud Services Provider

Enables the customer-managed encryption keys feature for the specified cloud service provider within the organization.

For AWS and GCP enabling the customer-managed encryption keys feature is only required if no AWS or GCP cluster respectively has ever been created in the organization.

The customer-managed encryption keys feature must always be enabled for Azure before Azure keys can be created. This operation provisions a multi-tenant Azure Entra ID application for the organization, which is required for Capella to access customer-managed encryption keys.

In order to access this endpoint, the provided API key must have at least one of the following roles:

• Organization Owner

To learn more, see Organization, Project, and Database Access Overview.

{
  "cloudProvider": "aws"
}