AWS CDK Reference

Appearance

v2.274.0

CloudWatchEncryption Class ​

CloudWatch Logs encryption configuration for a SecurityConfiguration.

CloudWatch Logs support only server-side encryption with a KMS key.

Source
aws-glue/lib/security-configuration.ts
Type last changed
v2.270.0 · 17 Sep 2026

Example ​

ts
new glue.SecurityConfiguration(this, 'MySecurityConfiguration', {
  cloudWatchEncryption: glue.CloudWatchEncryption.kms(),
  jobBookmarksEncryption: glue.JobBookmarksEncryption.clientSideKms(),
  s3Encryption: glue.S3Encryption.kms(),
});

Methods ​

kms(kmsKey?: IKeyRef): CloudWatchEncryption // chainable@staticmethod def kms(kms_key: typing.Optional[IKeyRef] = None) -> CloudWatchEncryptionpublic static CloudWatchEncryption kms(IKeyRef kmsKey)public static CloudWatchEncryption Kms(IKeyRef? kmsKey = null)func Kms(KmsKey IKeyRef) CloudWatchEncryptionstatic#
Server-side encryption (SSE) with an AWS KMS key managed by the account owner.
1 parameter

Parameters

  • kmsKeykms_keykmsKeykmsKeyKmsKey — the KMS key used to encrypt the data.