software.amazon.awscdk.services.sagemaker

Interface CfnFeatureGroup.OnlineStoreSecurityConfigProperty

All Known Implementing Classes:

CfnFeatureGroup.OnlineStoreSecurityConfigProperty.Jsii$Proxy

Enclosing class:

CfnFeatureGroup

public static interface CfnFeatureGroup.OnlineStoreSecurityConfigProperty

The security configuration for `OnlineStore` .

Example:

 // The code below shows an example of how to instantiate this type.
 // The values are placeholders you should change.
 import software.amazon.awscdk.services.sagemaker.*;
 OnlineStoreSecurityConfigProperty onlineStoreSecurityConfigProperty = OnlineStoreSecurityConfigProperty.builder()
         .kmsKeyId("kmsKeyId")
         .build();
 

Nested Class Summary

Nested Classes

Modifier and Type	Interface and Description
static class	CfnFeatureGroup.OnlineStoreSecurityConfigProperty.Builder A builder for CfnFeatureGroup.OnlineStoreSecurityConfigProperty
static class	CfnFeatureGroup.OnlineStoreSecurityConfigProperty.Jsii$Proxy An implementation for CfnFeatureGroup.OnlineStoreSecurityConfigProperty

Method Summary

Modifier and Type	Method and Description
static CfnFeatureGroup.OnlineStoreSecurityConfigProperty.Builder	builder()
default java.lang.String	getKmsKeyId() The AWS Key Management Service (KMS) key ARN that SageMaker Feature Store uses to encrypt the Amazon S3 objects at rest using Amazon S3 server-side encryption.

Method Detail

getKmsKeyId

default java.lang.String getKmsKeyId()

The AWS Key Management Service (KMS) key ARN that SageMaker Feature Store uses to encrypt the Amazon S3 objects at rest using Amazon S3 server-side encryption.

The caller (either user or IAM role) of CreateFeatureGroup must have below permissions to the OnlineStore KmsKeyId :

• "kms:Encrypt"
• "kms:Decrypt"
• "kms:DescribeKey"
• "kms:CreateGrant"
• "kms:RetireGrant"
• "kms:ReEncryptFrom"
• "kms:ReEncryptTo"
• "kms:GenerateDataKey"
• "kms:ListAliases"
• "kms:ListGrants"
• "kms:RevokeGrant"

The caller (either user or IAM role) to all DataPlane operations ( PutRecord , GetRecord , DeleteRecord ) must have the following permissions to the KmsKeyId :

• "kms:Decrypt"

builder

static CfnFeatureGroup.OnlineStoreSecurityConfigProperty.Builder builder()

Returns:

a CfnFeatureGroup.OnlineStoreSecurityConfigProperty.Builder of CfnFeatureGroup.OnlineStoreSecurityConfigProperty