EncryptionConfiguration

If query results are encrypted in Amazon S3, indicates the encryption option used (for example, SSE-KMS or CSE-KMS) and key information.

EncryptionOption

Indicates whether Amazon S3 server-side encryption with Amazon S3-managed keys (SSE-S3), server-side encryption with KMS-managed keys (SSE-KMS), or client-side encryption with KMS-managed keys (CSE-KMS) is used.

If a query runs in a workgroup and the workgroup overrides client-side settings, then the workgroup's setting for encryption is used. It specifies whether query results must be encrypted, for all queries that run in this workgroup.

Type: String

Valid Values: SSE_S3 | SSE_KMS | CSE_KMS

Required: Yes

KmsKey

For SSE-KMS and CSE-KMS, this is the KMS key ARN or ID.

Type: String

Required: No

EncryptionConfiguration

Contents

See Also