# DataSecurityConfigProperty

Data security configuration.

- Source: Generated code
- Type last changed: v2.93.0 · 23 Aug 2023

## Example

```ts
// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import { aws_comprehend as comprehend } from 'aws-cdk-lib';
const dataSecurityConfigProperty: comprehend.CfnFlywheel.DataSecurityConfigProperty = {
  dataLakeKmsKeyId: 'dataLakeKmsKeyId',
  modelKmsKeyId: 'modelKmsKeyId',
  volumeKmsKeyId: 'volumeKmsKeyId',
  vpcConfig: {
    securityGroupIds: ['securityGroupIds'],
    subnets: ['subnets'],
  },
};
```

## Properties

- `dataLakeKmsKeyId`: string — ID for the AWS key that Amazon Comprehend uses to encrypt the data in the data lake.

- `modelKmsKeyId`: string — ID for the AWS key that Amazon Comprehend uses to encrypt trained custom models.

  The ModelKmsKeyId can be either of the following formats:

  - KMS Key ID: `"1234abcd-12ab-34cd-56ef-1234567890ab"`
  - Amazon Resource Name (ARN) of a KMS Key: `"arn:aws:kms:us-west-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab"`

- `volumeKmsKeyId`: string — ID for the AWS key that Amazon Comprehend uses to encrypt the volume.

- `vpcConfig`: [IResolvable](/cdk/api/v2/docs/aws-cdk-lib.IResolvable.html) | [CfnFlywheel.VpcConfigProperty](/cdk/api/v2/docs/aws-cdk-lib.aws_comprehend.CfnFlywheel.VpcConfigProperty.html) — Configuration parameters for an optional private Virtual Private Cloud (VPC) containing the resources you are using for the job.

  For more information, see [Amazon VPC](https://docs.aws.amazon.com/vpc/latest/userguide/what-is-amazon-vpc.html) .