# DataCatalogEncryptionSettingsProperty

Contains configuration information for maintaining Data Catalog security.

- Source: Generated code
- Type last changed: v2.93.0 · 23 Aug 2023

## Example

```ts
// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import { aws_glue as glue } from 'aws-cdk-lib';
const dataCatalogEncryptionSettingsProperty: glue.CfnDataCatalogEncryptionSettings.DataCatalogEncryptionSettingsProperty = {
  connectionPasswordEncryption: {
    kmsKeyId: 'kmsKeyId',
    returnConnectionPasswordEncrypted: false,
  },
  encryptionAtRest: {
    catalogEncryptionMode: 'catalogEncryptionMode',
    catalogEncryptionServiceRole: 'catalogEncryptionServiceRole',
    sseAwsKmsKeyId: 'sseAwsKmsKeyId',
  },
};
```

## Properties

- `connectionPasswordEncryption`: [IResolvable](/cdk/api/v2/docs/aws-cdk-lib.IResolvable.html) | [CfnDataCatalogEncryptionSettings.ConnectionPasswordEncryptionProperty](/cdk/api/v2/docs/aws-cdk-lib.aws_glue.CfnDataCatalogEncryptionSettings.ConnectionPasswordEncryptionProperty.html) — When connection password protection is enabled, the Data Catalog uses a customer-provided key to encrypt the password as part of `CreateConnection` or `UpdateConnection` and store it in the `ENCRYPTED_PASSWORD` field in the connection properties.

  You can enable catalog encryption or only password encryption.

- `encryptionAtRest`: [IResolvable](/cdk/api/v2/docs/aws-cdk-lib.IResolvable.html) | [CfnDataCatalogEncryptionSettings.EncryptionAtRestProperty](/cdk/api/v2/docs/aws-cdk-lib.aws_glue.CfnDataCatalogEncryptionSettings.EncryptionAtRestProperty.html) — Specifies the encryption-at-rest configuration for the Data Catalog.