# SecurityConfigurationProps

Constructions properties of `SecurityConfiguration`.

Extends: SecurityConfigurationProps
Used as props by: SecurityConfiguration

- Source: [`aws-glue/lib/security-configuration.ts`](https://github.com/aws/aws-cdk/blob/v2.275.0/packages/aws-cdk-lib/aws-glue/lib/security-configuration.ts#L134)
- Type last changed: v2.270.0 · 17 Sep 2026

## Example

```ts
new glue.SecurityConfiguration(this, 'MySecurityConfiguration', {
  cloudWatchEncryption: glue.CloudWatchEncryption.kms(),
  jobBookmarksEncryption: glue.JobBookmarksEncryption.clientSideKms(),
  s3Encryption: glue.S3Encryption.kms(),
});
```

## Properties

- `cloudWatchEncryption`: [CloudWatchEncryption](/cdk/api/v2/docs/aws-cdk-lib.aws_glue.CloudWatchEncryption.html) — The encryption configuration for Amazon CloudWatch Logs.

  **Default:** no cloudwatch logs encryption.

- `jobBookmarksEncryption`: [JobBookmarksEncryption](/cdk/api/v2/docs/aws-cdk-lib.aws_glue.JobBookmarksEncryption.html) — The encryption configuration for Glue Job Bookmarks.

  **Default:** no job bookmarks encryption.

- `removalPolicy`: [RemovalPolicy](/cdk/api/v2/docs/aws-cdk-lib.RemovalPolicy.html) — Policy to apply when the security configuration is removed from the stack.

  **Default:** resource will be destroyed

- `s3Encryption`: [S3Encryption](/cdk/api/v2/docs/aws-cdk-lib.aws_glue.S3Encryption.html) — The encryption configuration for Amazon Simple Storage Service (Amazon S3) data.

  **Default:** no s3 encryption.

- `securityConfigurationName`: string — The name of the security configuration.

  **Default:** generated by CDK.