diff --git a/docs/providers-guide.md b/docs/providers-guide.md
index e16e9d67f..e7f45f0de 100644
--- a/docs/providers-guide.md
+++ b/docs/providers-guide.md
@@ -647,3 +647,11 @@ Provider type: `s3`.
 - *role* - *(String)* default:
   `arn:${partition}:iam::${target_account_id}:role/adf-cloudformation-role`.
   - The role you would like to use for this action.
+- *kms_encryption_key_arn* - *(String)*
+  - The ARN of the AWS KMS encryption key for the host bucket. The
+    `kms_encryption_key_arn` parameter encrypts uploaded artifacts with the
+    provided AWS KMS key. For a KMS key, you can use the key ID, the key ARN,
+    or the alias ARN.
+- *cache_control* - *(String)*
+  - The `cache_control` parameter controls caching behavior for
+    requests/responses for objects in the bucket.
diff --git a/src/lambda_codebase/initial_commit/bootstrap_repository/adf-build/shared/cdk/cdk_constructs/adf_codepipeline.py b/src/lambda_codebase/initial_commit/bootstrap_repository/adf-build/shared/cdk/cdk_constructs/adf_codepipeline.py
index 5e7176015..3df0b2f2a 100644
--- a/src/lambda_codebase/initial_commit/bootstrap_repository/adf-build/shared/cdk/cdk_constructs/adf_codepipeline.py
+++ b/src/lambda_codebase/initial_commit/bootstrap_repository/adf-build/shared/cdk/cdk_constructs/adf_codepipeline.py
@@ -188,6 +188,28 @@ def _generate_configuration(self):
                         .get('object_key')
                     ))
                 ),
+                "KMSEncryptionKeyARN": (
+                    self.target
+                    .get('properties', {})
+                    .get('kms_encryption_key_arn', (
+                        self.map_params
+                        .get('default_providers', {})
+                        .get('deploy', {})
+                        .get('properties', {})
+                        .get('kms_encryption_key_arn')
+                    ))
+                ),
+                "CacheControl": (
+                    self.target
+                    .get('properties', {})
+                    .get('cache_control', (
+                        self.map_params
+                        .get('default_providers', {})
+                        .get('deploy', {})
+                        .get('properties', {})
+                        .get('cache_control')
+                    ))
+                ),
             }
         if self.provider == "CodeStarSourceConnection":
             default_source_props = (