aws-cdk-lib.aws_glue.CfnDataCatalogEncryptionSettings.DataCatalogEncryptionSettingsProperty

DataCatalogEncryptionSettingsProperty Struct

Contains configuration information for maintaining Data Catalog security.

Source

Generated code

Type last changed

v2.93.0 · 23 Aug 2023

Example

// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import { aws_glue as glue } from 'aws-cdk-lib';
const dataCatalogEncryptionSettingsProperty: glue.CfnDataCatalogEncryptionSettings.DataCatalogEncryptionSettingsProperty = {
  connectionPasswordEncryption: {
    kmsKeyId: 'kmsKeyId',
    returnConnectionPasswordEncrypted: false,
  },
  encryptionAtRest: {
    catalogEncryptionMode: 'catalogEncryptionMode',
    catalogEncryptionServiceRole: 'catalogEncryptionServiceRole',
    sseAwsKmsKeyId: 'sseAwsKmsKeyId',
  },
};

Properties

connectionPasswordEncryption?optionalIResolvable | CfnDataCatalogEncryptionSettings.ConnectionPasswordEncryptionPropertyconnection_password_encryption?optionaltyping.Union[IResolvable, ConnectionPasswordEncryptionProperty]connectionPasswordEncryption?optionalIResolvableConnectionPasswordEncryption?optionalIResolvableConnectionPasswordEncryption?optionalinterface{}#

When connection password protection is enabled, the Data Catalog uses a customer-provided key to encrypt the password as part of `CreateConnection` or `UpdateConnection` and store it in the `ENCRYPTED_PASSWORD` field in the connection properties.

You can enable catalog encryption or only password encryption.

encryptionAtRest?optionalIResolvable | CfnDataCatalogEncryptionSettings.EncryptionAtRestPropertyencryption_at_rest?optionaltyping.Union[IResolvable, EncryptionAtRestProperty]encryptionAtRest?optionalIResolvableEncryptionAtRest?optionalIResolvableEncryptionAtRest?optionalinterface{}#

Specifies the encryption-at-rest configuration for the Data Catalog.