Skip to content
v2.273.0

ConnectionPasswordEncryption Struct ​

Connection-password encryption configuration for a Glue Data Catalog.

When enabled, the Data Catalog encrypts the password as part of CreateConnection or UpdateConnection and stores it in the ENCRYPTED_PASSWORD field of the connection properties. This is independent from catalog encryption at rest, and may use a different KMS key.

Example ​

ts
declare const key: kms.Key;
glue.Catalog.encryptAccount(this, {
  connectionPasswordEncryption: {
    kmsKey: key,
    // Whether GetConnection/GetConnections return the password encrypted (default: true)
    returnConnectionPasswordEncrypted: true,
  },
});

Properties ​

kmsKeyIKeyRefkms_keyIKeyRefkmsKeyIKeyRefKmsKeyIKeyRefKmsKeyIKeyRef= an AWS-managed key is used and t…#
The KMS key used to encrypt connection passwords.
default

Default: an AWS-managed key is used and the key is not exposed as a grantable resource.

returnConnectionPasswordEncryptedbooleanreturn_connection_password_encryptedboolreturnConnectionPasswordEncryptedBooleanReturnConnectionPasswordEncryptedboolReturnConnectionPasswordEncrypted*bool= true#
Whether passwords remain encrypted in the responses of `GetConnection` and `GetConnections`.

This takes effect independently from catalog encryption.