IEncryptedResourceFactory Interface
Factory interface for creating IEncryptedResource instances from constructs.
Implementations of this interface are registered in the DefaultEncryptedResourceFactories registry and enable automatic KMS key permission grants for encrypted CloudFormation resources. When a grant operation is performed on an encrypted resource, the factory converts L1 constructs into resources that can grant permissions on their associated KMS encryption keys.
Factories are typically registered during static initialization and associated with specific CloudFormation resource types (e.g., 'AWS::DynamoDB::Table'). The CDK's grant system uses these factories to automatically add necessary KMS key permissions when granting access to encrypted resources.
Methods
forResource(resource: CfnResource): IEncryptedResourcedef for_resource(self, resource: CfnResource) -> IEncryptedResourcepublic IEncryptedResource forResource(CfnResource resource)public IEncryptedResource ForResource(CfnResource resource)func ForResource(Resource CfnResource) IEncryptedResource#Create an IEncryptedResource from a construct.
1 parameter
Parameters
resourceresourceresourceresourceResource— the construct to be wrapped as an IEncryptedResource.