EncryptionAtRest - AWS Glue

EncryptionAtRest

Specifies the encryption-at-rest configuration for the Data Catalog.

Contents

CatalogEncryptionMode

The encryption-at-rest mode for encrypting Data Catalog data.

Type: String

Valid Values: DISABLED | SSE-KMS | SSE-KMS-WITH-SERVICE-ROLE

Required: Yes

CatalogEncryptionServiceRole

The role that AWS Glue assumes to encrypt and decrypt the Data Catalog objects on the caller's behalf.

Type: String

Pattern: ^arn:aws(-(cn|us-gov|iso(-[bef])?))?:iam::[0-9]{12}:role/.+

Required: No

SseAwsKmsKeyId

The ID of the AWS KMS key to use for encryption at rest.

Type: String

Length Constraints: Minimum length of 1. Maximum length of 255.

Pattern: [\u0020-\uD7FF\uE000-\uFFFD\uD800\uDC00-\uDBFF\uDFFF\t]*

Required: No

See Also

For more information about using this API in one of the language-specific AWS SDKs, see the following: