CatalogEncryptionOptions Struct
Encryption configuration for a Glue Data Catalog.
Encryption is fixed at construction: a catalog either carries encryption settings or it does not, which keeps its configuration easy to reason about and avoids order-dependent mutation after the catalog is created.
Example
ts
import * as iam from 'aws-cdk-lib/aws-iam';
declare const key: kms.Key;
declare const role: iam.IRole;
glue.Catalog.encryptAccount(this, {
encryptionAtRest: glue.DataCatalogEncryptionAtRest.kmsWithServiceRole(role, key),
});
Properties
connectionPasswordEncryptionoptionalConnectionPasswordEncryptionconnection_password_encryptionoptionalConnectionPasswordEncryptionconnectionPasswordEncryptionoptionalConnectionPasswordEncryptionConnectionPasswordEncryptionoptionalConnectionPasswordEncryptionConnectionPasswordEncryptionoptionalConnectionPasswordEncryption#Connection-password encryption configuration for the catalog.
Default: connection-password encryption is not managed by CDK
encryptionAtRestoptionalDataCatalogEncryptionAtRestencryption_at_restoptionalDataCatalogEncryptionAtRestencryptionAtRestoptionalDataCatalogEncryptionAtRestEncryptionAtRestoptionalDataCatalogEncryptionAtRestEncryptionAtRestoptionalDataCatalogEncryptionAtRest#Encryption-at-rest configuration for the catalog.
Default: encryption at rest is not managed by CDK (the catalog default applies)