S3Encryption

class aws_cdk.aws_glue_alpha.S3Encryption(*, mode, kms_key=None)

Bases: object

(experimental) S3 encryption configuration.

Parameters:
  • mode (S3EncryptionMode) – (experimental) Encryption mode.

  • kms_key (Optional[IKey]) – (experimental) The KMS key to be used to encrypt the data. Default: no kms key if mode = S3_MANAGED. A key will be created if one is not provided and mode = KMS.

Stability:

experimental

ExampleMetadata:

infused

Example:

glue.SecurityConfiguration(self, "MySecurityConfiguration",
    cloud_watch_encryption=glue.CloudWatchEncryption(
        mode=glue.CloudWatchEncryptionMode.KMS
    ),
    job_bookmarks_encryption=glue.JobBookmarksEncryption(
        mode=glue.JobBookmarksEncryptionMode.CLIENT_SIDE_KMS
    ),
    s3_encryption=glue.S3Encryption(
        mode=glue.S3EncryptionMode.KMS
    )
)

Attributes

kms_key

(experimental) The KMS key to be used to encrypt the data.

Default:

no kms key if mode = S3_MANAGED. A key will be created if one is not provided and mode = KMS.

Stability:

experimental

mode

(experimental) Encryption mode.

Stability:

experimental