ConnectionPasswordEncryption

class aws_cdk.aws_glue_alpha.ConnectionPasswordEncryption(*, kms_key=None, return_connection_password_encrypted=None)

Bases: object

(experimental) Connection-password encryption configuration for a Glue Data Catalog.

When enabled, the Data Catalog encrypts the password as part of CreateConnection or UpdateConnection and stores it in the ENCRYPTED_PASSWORD field of the connection properties. This is independent from catalog encryption at rest, and may use a different KMS key.

Parameters:

kms_key (Optional[IKeyRef]) – (experimental) The KMS key used to encrypt connection passwords. Default: - an AWS-managed key is used and the key is not exposed as a grantable resource.
return_connection_password_encrypted (Optional[bool]) – (experimental) Whether passwords remain encrypted in the responses of GetConnection and GetConnections. This takes effect independently from catalog encryption. Default: true

See:

https://docs.aws.amazon.com/glue/latest/webapi/API_ConnectionPasswordEncryption.html

Stability:

experimental

ExampleMetadata:

infused

Example:

# key: kms.Key

glue.Catalog.encrypt_account(self,
    connection_password_encryption=glue.ConnectionPasswordEncryption(
        kms_key=key,
        # Whether GetConnection/GetConnections return the password encrypted (default: true)
        return_connection_password_encrypted=True
    )
)

Attributes

kms_key

(experimental) The KMS key used to encrypt connection passwords.

Default:

an AWS-managed key is used and the key is not exposed as a grantable resource.

Stability:

experimental

return_connection_password_encrypted

(experimental) Whether passwords remain encrypted in the responses of GetConnection and GetConnections.

This takes effect independently from catalog encryption.

Default:: true
Stability:: experimental