software.amazon.awscdk.services.glue

Class SecurityConfiguration

java.lang.Object

software.constructs.Construct

software.amazon.awscdk.core.Construct

software.amazon.awscdk.core.Resource

software.amazon.awscdk.services.glue.SecurityConfiguration

All Implemented Interfaces:

IConstruct, IDependable, IResource, ISecurityConfiguration

@Generated(value="jsii-pacmak/1.74.0 (build 6d08790)",
           date="2023-03-22T19:35:45.683Z")
public class SecurityConfiguration
extends Resource
implements ISecurityConfiguration

(experimental) A security configuration is a set of security properties that can be used by AWS Glue to encrypt data at rest.

The following scenarios show some of the ways that you can use a security configuration.

• Attach a security configuration to an AWS Glue crawler to write encrypted Amazon CloudWatch Logs.
• Attach a security configuration to an extract, transform, and load (ETL) job to write encrypted Amazon Simple Storage Service (Amazon S3) targets and encrypted CloudWatch Logs.
• Attach a security configuration to an ETL job to write its jobs bookmarks as encrypted Amazon S3 data.
• Attach a security configuration to a development endpoint to write encrypted Amazon S3 targets.

Example:

 SecurityConfiguration.Builder.create(this, "MySecurityConfiguration")
         .securityConfigurationName("name")
         .cloudWatchEncryption(CloudWatchEncryption.builder()
                 .mode(CloudWatchEncryptionMode.KMS)
                 .build())
         .jobBookmarksEncryption(JobBookmarksEncryption.builder()
                 .mode(JobBookmarksEncryptionMode.CLIENT_SIDE_KMS)
                 .build())
         .s3Encryption(S3Encryption.builder()
                 .mode(S3EncryptionMode.KMS)
                 .build())
         .build();
 

Nested Class Summary

Nested Classes

Modifier and Type	Class and Description
static class	SecurityConfiguration.Builder (experimental) A fluent builder for SecurityConfiguration.

Nested classes/interfaces inherited from interface software.amazon.awscdk.services.glue.ISecurityConfiguration

ISecurityConfiguration.Jsii$Default, ISecurityConfiguration.Jsii$Proxy

Constructor Summary

Constructors

Modifier	Constructor and Description
protected	SecurityConfiguration(software.amazon.jsii.JsiiObject.InitializationMode initializationMode)
protected	SecurityConfiguration(software.amazon.jsii.JsiiObjectRef objRef)
	SecurityConfiguration(software.constructs.Construct scope, java.lang.String id, SecurityConfigurationProps props)

Method Summary

Modifier and Type	Method and Description
static ISecurityConfiguration	fromSecurityConfigurationName(software.constructs.Construct scope, java.lang.String id, java.lang.String securityConfigurationName) (experimental) Creates a Connection construct that represents an external security configuration.
IKey	getCloudWatchEncryptionKey() (experimental) The KMS key used in CloudWatch encryption if it requires a kms key.
IKey	getJobBookmarksEncryptionKey() (experimental) The KMS key used in job bookmarks encryption if it requires a kms key.
IKey	getS3EncryptionKey() (experimental) The KMS key used in S3 encryption if it requires a kms key.
java.lang.String	getSecurityConfigurationName() (experimental) The name of the security configuration.

Methods inherited from class software.amazon.awscdk.core.Resource

applyRemovalPolicy, generatePhysicalName, getEnv, getPhysicalName, getResourceArnAttribute, getResourceNameAttribute, getStack, isResource

Methods inherited from class software.amazon.awscdk.core.Construct

getNode, isConstruct, onPrepare, onSynthesize, onValidate, prepare, synthesize, validate

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface software.amazon.awscdk.core.IResource

applyRemovalPolicy, getEnv, getStack

Methods inherited from interface software.amazon.awscdk.core.IConstruct

getNode

Constructor Detail

SecurityConfiguration

protected SecurityConfiguration(software.amazon.jsii.JsiiObjectRef objRef)

SecurityConfiguration

protected SecurityConfiguration(software.amazon.jsii.JsiiObject.InitializationMode initializationMode)

SecurityConfiguration

public SecurityConfiguration(software.constructs.Construct scope,
                             java.lang.String id,
                             SecurityConfigurationProps props)

Parameters:

scope - This parameter is required.

id - This parameter is required.

props - This parameter is required.

Method Detail

fromSecurityConfigurationName

public static ISecurityConfiguration fromSecurityConfigurationName(software.constructs.Construct scope,
                                                                   java.lang.String id,
                                                                   java.lang.String securityConfigurationName)

(experimental) Creates a Connection construct that represents an external security configuration.

Parameters:

scope - The scope creating construct (usually `this`). This parameter is required.

id - The construct's id. This parameter is required.

securityConfigurationName - name of external security configuration. This parameter is required.

getSecurityConfigurationName

public java.lang.String getSecurityConfigurationName()

(experimental) The name of the security configuration.

Specified by:

getSecurityConfigurationName in interface ISecurityConfiguration

getCloudWatchEncryptionKey

public IKey getCloudWatchEncryptionKey()

(experimental) The KMS key used in CloudWatch encryption if it requires a kms key.

getJobBookmarksEncryptionKey

public IKey getJobBookmarksEncryptionKey()

(experimental) The KMS key used in job bookmarks encryption if it requires a kms key.

getS3EncryptionKey

public IKey getS3EncryptionKey()

(experimental) The KMS key used in S3 encryption if it requires a kms key.