EncryptionConfiguration

class aws_cdk.aws_stepfunctions_tasks.EncryptionConfiguration(*, encryption_option, encryption_key=None)

Bases: object

Encryption Configuration of the S3 bucket.

Parameters:

encryption_option (EncryptionOption) – Type of S3 server-side encryption enabled. Default: EncryptionOption.S3_MANAGED
encryption_key (Optional[IKey]) – KMS key ARN or ID. Default: - No KMS key for Encryption Option SSE_S3 and default master key for Encryption Option SSE_KMS and CSE_KMS

See:

https://docs.aws.amazon.com/athena/latest/APIReference/API_EncryptionConfiguration.html

ExampleMetadata:

infused

Example:

start_query_execution_job = tasks.AthenaStartQueryExecution(self, "Athena Start Query",
    query_string=sfn.JsonPath.format("select contacts where year={};", sfn.JsonPath.string_at("$.year")),
    query_execution_context=tasks.QueryExecutionContext(
        database_name="interactions"
    ),
    result_configuration=tasks.ResultConfiguration(
        encryption_configuration=tasks.EncryptionConfiguration(
            encryption_option=tasks.EncryptionOption.S3_MANAGED
        ),
        output_location=s3.Location(
            bucket_name="mybucket",
            object_key="myprefix"
        )
    ),
    integration_pattern=sfn.IntegrationPattern.RUN_JOB
)

Attributes

encryption_key

KMS key ARN or ID.

Default:

No KMS key for Encryption Option SSE_S3 and default master key for Encryption Option SSE_KMS and CSE_KMS

encryption_option

Type of S3 server-side encryption enabled.

Default:: EncryptionOption.S3_MANAGED