Package software.amazon.awscdk.services.iam

Interface IEncryptedResourceFactory

All Superinterfaces:

software.amazon.jsii.JsiiSerializable

All Known Subinterfaces:

IEncryptedResourceFactory.Jsii$Default

All Known Implementing Classes:

IEncryptedResourceFactory.Jsii$Proxy

@Generated(value="jsii-pacmak/1.127.0 (build 2117ad5)",
           date="2026-03-19T12:55:06.067Z")
@Stability(Stable)
public interface IEncryptedResourceFactory
extends software.amazon.jsii.JsiiSerializable

Factory interface for creating IEncryptedResource instances from constructs.

Implementations of this interface are registered in the DefaultEncryptedResourceFactories registry and enable automatic KMS key permission grants for encrypted CloudFormation resources. When a grant operation is performed on an encrypted resource, the factory converts L1 constructs into resources that can grant permissions on their associated KMS encryption keys.

Factories are typically registered during static initialization and associated with specific CloudFormation resource types (e.g., 'AWS::DynamoDB::Table'). The CDK's grant system uses these factories to automatically add necessary KMS key permissions when granting access to encrypted resources.

Nested Class Summary

Nested Classes

Modifier and Type	Interface	Description
static interface	IEncryptedResourceFactory.Jsii$Default	Internal default implementation for IEncryptedResourceFactory.
static final class	IEncryptedResourceFactory.Jsii$Proxy	A proxy class which represents a concrete javascript instance of this type.

Method Summary

Modifier and Type	Method	Description
IEncryptedResource	forResource(CfnResource resource)	Create an IEncryptedResource from a construct.

Methods inherited from interface software.amazon.jsii.JsiiSerializable

$jsii$toJson

Method Details

forResource

@Stability(Stable)
@NotNull
IEncryptedResource forResource(@NotNull
 CfnResource resource)

Create an IEncryptedResource from a construct.

Parameters:

resource - the construct to be wrapped as an IEncryptedResource. This parameter is required.