EncryptionOption¶

class aws_cdk.aws_stepfunctions_tasks.EncryptionOption(value)¶

Bases: enum.Enum

Encryption Options of the S3 bucket.

See: https://docs.aws.amazon.com/athena/latest/APIReference/API_EncryptionConfiguration.html#athena-Type-EncryptionConfiguration-EncryptionOption

Example:

start_query_execution_job = tasks.AthenaStartQueryExecution(self, "Athena Start Query",
    query_string=sfn.JsonPath.string_at("States.Format('select contacts where year={};', $.year)"),
    query_execution_context=tasks.QueryExecutionContext(
        database_name="interactions"
    ),
    result_configuration=tasks.ResultConfiguration(
        encryption_configuration=tasks.EncryptionConfiguration(
            encryption_option=tasks.EncryptionOption.S3_MANAGED
        ),
        output_location=s3.Location(
            bucket_name="mybucket",
            object_key="myprefix"
        )
    ),
    integration_pattern=sfn.IntegrationPattern.RUN_JOB
)

Attributes

CLIENT_SIDE_KMS¶

Client-side encryption (CSE) with an AWS KMS key managed by the account owner.

See: https://docs.aws.amazon.com/AmazonS3/latest/dev/UsingClientSideEncryption.html

KMS¶

Server-side encryption (SSE) with an AWS KMS key managed by the account owner.

See: https://docs.aws.amazon.com/AmazonS3/latest/dev/UsingKMSEncryption.html

S3_MANAGED¶

Server side encryption (SSE) with an Amazon S3-managed key.

See: https://docs.aws.amazon.com/AmazonS3/latest/dev/UsingServerSideEncryption.html