class S3Encryption 🔹

Language	Type name
.NET	Amazon.CDK.AWS.Glue.Alpha.S3Encryption
Go	github.com/aws/aws-cdk-go/awscdkgluealpha/v2#S3Encryption
Java	software.amazon.awscdk.services.glue.alpha.S3Encryption
Python	aws_cdk.aws_glue_alpha.S3Encryption
TypeScript (source)	@aws-cdk/aws-glue-alpha » S3Encryption

S3 encryption configuration for a SecurityConfiguration.

Use {@link S3Encryption.s3Managed} for SSE-S3 or {@link S3Encryption.kms} for SSE-KMS. Because these are separate factories, a KMS key can never be paired with S3-managed encryption.

Example

new glue.SecurityConfiguration(this, 'MySecurityConfiguration', {
  cloudWatchEncryption: glue.CloudWatchEncryption.kms(),
  jobBookmarksEncryption: glue.JobBookmarksEncryption.clientSideKms(),
  s3Encryption: glue.S3Encryption.kms(),
});

Methods

Name	Description
static kms(kmsKey?)🔹	Server-side encryption (SSE) with an AWS KMS key managed by the account owner.
static s3Managed()🔹	Server-side encryption (SSE) with an Amazon S3-managed key.

---

static kms(kmsKey?)🔹

public static kms(kmsKey?: IKeyRef): S3Encryption

Parameters

• kmsKey IKeyRef — the KMS key used to encrypt the data.

Returns

• S3Encryption

Server-side encryption (SSE) with an AWS KMS key managed by the account owner.

See also: https://docs.aws.amazon.com/AmazonS3/latest/dev/UsingKMSEncryption.html

---

static s3Managed()🔹

public static s3Managed(): S3Encryption

Returns

• S3Encryption

Server-side encryption (SSE) with an Amazon S3-managed key.

See also: https://docs.aws.amazon.com/AmazonS3/latest/dev/UsingServerSideEncryption.html