in deliverystream/src/main/java/com/amazonaws/kinesisfirehose/deliverystream/UpdateHandler.java [164:178]
private EncryptionAction getEncryptionActionToPerform(final ResourceModel model, final DescribeDeliveryStreamResponse describeResponse) {
EncryptionAction encryptionAction = EncryptionAction.DO_NOTHING;
val modelDSEncryptionConfig = model.getDeliveryStreamEncryptionConfigurationInput();
val existingDSEncryptionConfig = describeResponse.deliveryStreamDescription().deliveryStreamEncryptionConfiguration();
if (modelDSEncryptionConfig != null) {
if (areEncryptionParametersUnchanged(modelDSEncryptionConfig, existingDSEncryptionConfig)) {
return encryptionAction;
}
encryptionAction = EncryptionAction.START;
}
else if (existingDSEncryptionConfig != null && !DeliveryStreamEncryptionStatus.DISABLED.toString().equals(existingDSEncryptionConfig.statusAsString())) {
encryptionAction = EncryptionAction.STOP;
}
return encryptionAction;
}