EncryptionConfiguration

class aws_cdk.aws_stepfunctions_tasks.EncryptionConfiguration(*, encryption_option, encryption_key=None)

Bases: object

Encryption Configuration of the S3 bucket.

Parameters:

encryption_option (EncryptionOption) – Type of S3 server-side encryption enabled. Default: EncryptionOption.S3_MANAGED
encryption_key (Optional[IKey]) – KMS key ARN or ID. Default: - No KMS key for Encryption Option SSE_S3 and default master key for Encryption Option SSE_KMS and CSE_KMS

See:

https://docs.aws.amazon.com/athena/latest/APIReference/API_EncryptionConfiguration.html

ExampleMetadata:

infused

Example:

start_query_execution_job = tasks.AthenaStartQueryExecution(self, "Start Athena Query",
    query_string=sfn.JsonPath.string_at("$.queryString"),
    query_execution_context=tasks.QueryExecutionContext(
        database_name="mydatabase"
    ),
    result_configuration=tasks.ResultConfiguration(
        encryption_configuration=tasks.EncryptionConfiguration(
            encryption_option=tasks.EncryptionOption.S3_MANAGED
        ),
        output_location=s3.Location(
            bucket_name="query-results-bucket",
            object_key="folder"
        )
    ),
    execution_parameters=["param1", "param2"]
)

Attributes

encryption_key

KMS key ARN or ID.

Default:

No KMS key for Encryption Option SSE_S3 and default master key for Encryption Option SSE_KMS and CSE_KMS

encryption_option

Type of S3 server-side encryption enabled.

Default:: EncryptionOption.S3_MANAGED