AWS::Comprehend::Flywheel DataSecurityConfig

Data security configuration.

Syntax

To declare this entity in your AWS CloudFormation template, use the following syntax:

JSON

{
  "DataLakeKmsKeyId" : String,
  "ModelKmsKeyId" : String,
  "VolumeKmsKeyId" : String,
  "VpcConfig" : VpcConfig
}

YAML

  DataLakeKmsKeyId: String
  ModelKmsKeyId: String
  VolumeKmsKeyId: String
  VpcConfig: 
    VpcConfig

Properties

DataLakeKmsKeyId

ID for the AWS KMS key that Amazon Comprehend uses to encrypt the data in the data lake.

Required: No

Type: String

Minimum: 1

Maximum: 2048

Update requires: No interruption

ModelKmsKeyId

ID for the AWS KMS key that Amazon Comprehend uses to encrypt trained custom models. The ModelKmsKeyId can be either of the following formats:

• KMS Key ID: "1234abcd-12ab-34cd-56ef-1234567890ab"

• Amazon Resource Name (ARN) of a KMS Key: "arn:aws:kms:us-west-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab"

Required: No

Type: String

Minimum: 1

Maximum: 2048

Update requires: No interruption

VolumeKmsKeyId

ID for the AWS KMS key that Amazon Comprehend uses to encrypt the volume.

Required: No

Type: String

Minimum: 1

Maximum: 2048

Update requires: No interruption

VpcConfig

Configuration parameters for an optional private Virtual Private Cloud (VPC) containing the resources you are using for the job. For more information, see Amazon VPC.

Required: No

Type: VpcConfig

Update requires: No interruption