public static interface CfnFeatureGroup.OnlineStoreSecurityConfigProperty
Example:
// The code below shows an example of how to instantiate this type. // The values are placeholders you should change. import software.amazon.awscdk.services.sagemaker.*; OnlineStoreSecurityConfigProperty onlineStoreSecurityConfigProperty = OnlineStoreSecurityConfigProperty.builder() .kmsKeyId("kmsKeyId") .build();
Modifier and Type | Interface and Description |
---|---|
static class |
CfnFeatureGroup.OnlineStoreSecurityConfigProperty.Builder
A builder for
CfnFeatureGroup.OnlineStoreSecurityConfigProperty |
static class |
CfnFeatureGroup.OnlineStoreSecurityConfigProperty.Jsii$Proxy
An implementation for
CfnFeatureGroup.OnlineStoreSecurityConfigProperty |
Modifier and Type | Method and Description |
---|---|
static CfnFeatureGroup.OnlineStoreSecurityConfigProperty.Builder |
builder() |
default java.lang.String |
getKmsKeyId()
The AWS Key Management Service (KMS) key ARN that SageMaker Feature Store uses to encrypt the Amazon S3 objects at rest using Amazon S3 server-side encryption.
|
default java.lang.String getKmsKeyId()
The caller (either user or IAM role) of CreateFeatureGroup
must have below permissions to the OnlineStore
KmsKeyId
:
"kms:Encrypt"
"kms:Decrypt"
"kms:DescribeKey"
"kms:CreateGrant"
"kms:RetireGrant"
"kms:ReEncryptFrom"
"kms:ReEncryptTo"
"kms:GenerateDataKey"
"kms:ListAliases"
"kms:ListGrants"
"kms:RevokeGrant"
The caller (either user or IAM role) to all DataPlane operations ( PutRecord
, GetRecord
, DeleteRecord
) must have the following permissions to the KmsKeyId
:
"kms:Decrypt"
static CfnFeatureGroup.OnlineStoreSecurityConfigProperty.Builder builder()