Package software.amazon.awscdk.services.sagemaker

Interface CfnFeatureGroup.OnlineStoreSecurityConfigProperty

All Superinterfaces:

software.amazon.jsii.JsiiSerializable

All Known Implementing Classes:

CfnFeatureGroup.OnlineStoreSecurityConfigProperty.Jsii$Proxy

Enclosing class:

CfnFeatureGroup

@Stability(Stable)
public static interface CfnFeatureGroup.OnlineStoreSecurityConfigProperty
extends software.amazon.jsii.JsiiSerializable

The security configuration for OnlineStore .

Example:

 // The code below shows an example of how to instantiate this type.
 // The values are placeholders you should change.
 import software.amazon.awscdk.services.sagemaker.*;
 OnlineStoreSecurityConfigProperty onlineStoreSecurityConfigProperty = OnlineStoreSecurityConfigProperty.builder()
         .kmsKeyId("kmsKeyId")
         .build();
 

Nested Class Summary

Nested Classes

Modifier and Type	Interface	Description
static final class	CfnFeatureGroup.OnlineStoreSecurityConfigProperty.Builder	A builder for CfnFeatureGroup.OnlineStoreSecurityConfigProperty
static final class	CfnFeatureGroup.OnlineStoreSecurityConfigProperty.Jsii$Proxy	An implementation for CfnFeatureGroup.OnlineStoreSecurityConfigProperty

Method Summary

Modifier and Type	Method	Description
static CfnFeatureGroup.OnlineStoreSecurityConfigProperty.Builder	builder()
default String	getKmsKeyId()	The AWS Key Management Service (KMS) key ARN that SageMaker Feature Store uses to encrypt the Amazon S3 objects at rest using Amazon S3 server-side encryption.

Methods inherited from interface software.amazon.jsii.JsiiSerializable

$jsii$toJson

Method Details

getKmsKeyId

@Stability(Stable)
@Nullable
default String getKmsKeyId()

The AWS Key Management Service (KMS) key ARN that SageMaker Feature Store uses to encrypt the Amazon S3 objects at rest using Amazon S3 server-side encryption.

The caller (either user or IAM role) of CreateFeatureGroup must have below permissions to the OnlineStore KmsKeyId :

• "kms:Encrypt"
• "kms:Decrypt"
• "kms:DescribeKey"
• "kms:CreateGrant"
• "kms:RetireGrant"
• "kms:ReEncryptFrom"
• "kms:ReEncryptTo"
• "kms:GenerateDataKey"
• "kms:ListAliases"
• "kms:ListGrants"
• "kms:RevokeGrant"

The caller (either user or IAM role) to all DataPlane operations ( PutRecord , GetRecord , DeleteRecord ) must have the following permissions to the KmsKeyId :

• "kms:Decrypt"

builder

@Stability(Stable)
static CfnFeatureGroup.OnlineStoreSecurityConfigProperty.Builder builder()

Returns:

a CfnFeatureGroup.OnlineStoreSecurityConfigProperty.Builder of CfnFeatureGroup.OnlineStoreSecurityConfigProperty