AWS CDK Reference

Appearance

v2.276.0

CloudWatchEncryption Class ​

CloudWatch Logs encryption configuration for a SecurityConfiguration.

CloudWatch Logs support only server-side encryption with a KMS key.

Source
aws-glue/lib/security-configuration.ts
Type last changed
v2.270.0 · 17 Sep 2026

Example ​

ts
new glue.SecurityConfiguration(this, 'MySecurityConfiguration', {
  cloudWatchEncryption: glue.CloudWatchEncryption.kms(),
  jobBookmarksEncryption: glue.JobBookmarksEncryption.clientSideKms(),
  s3Encryption: glue.S3Encryption.kms(),
});
python
glue.SecurityConfiguration(self, "MySecurityConfiguration",
    cloud_watch_encryption=glue.CloudWatchEncryption.kms(),
    job_bookmarks_encryption=glue.JobBookmarksEncryption.client_side_kms(),
    s3_encryption=glue.S3Encryption.kms()
)
java
SecurityConfiguration.Builder.create(this, "MySecurityConfiguration")
        .cloudWatchEncryption(CloudWatchEncryption.kms())
        .jobBookmarksEncryption(JobBookmarksEncryption.clientSideKms())
        .s3Encryption(S3Encryption.kms())
        .build();
csharp
// Install: dotnet add package Amazon.CDK.Lib
new SecurityConfiguration(this, "MySecurityConfiguration", new SecurityConfigurationProps {
    CloudWatchEncryption = CloudWatchEncryption.Kms(),
    JobBookmarksEncryption = JobBookmarksEncryption.ClientSideKms(),
    S3Encryption = S3Encryption.Kms()
});
go
// Install: go get github.com/aws/aws-cdk-go/awscdk/v2
glue.NewSecurityConfiguration(this, jsii.String("MySecurityConfiguration"), &SecurityConfigurationProps{
	CloudWatchEncryption: glue.CloudWatchEncryption_Kms(),
	JobBookmarksEncryption: glue.JobBookmarksEncryption_ClientSideKms(),
	S3Encryption: glue.S3Encryption_Kms(),
})

Methods ​

kms(kmsKey?: IKeyRef): CloudWatchEncryption // chainable@staticmethod def kms(kms_key: typing.Optional[IKeyRef] = None) -> CloudWatchEncryptionpublic static CloudWatchEncryption kms(IKeyRef kmsKey)public static CloudWatchEncryption Kms(IKeyRef? kmsKey = null)func Kms(KmsKey IKeyRef) CloudWatchEncryptionstatic#
Server-side encryption (SSE) with an AWS KMS key managed by the account owner.
1 parameter

Parameters

  • kmsKeykms_keykmsKeykmsKeyKmsKey — the KMS key used to encrypt the data.