S3TableEncryption

class aws_cdk.aws_glue_alpha.S3TableEncryption(*args: Any, **kwargs)

Bases: object

(experimental) Server-side encryption for the S3 bucket that a managed S3Table creates.

Applies only when the table manages its own bucket (via S3TableStorage.managedBucket). An existing bucket keeps whatever encryption it was created with.

Stability:

experimental

ExampleMetadata:

infused

Example:

# my_database: glue.Database

glue.S3Table(self, "MyTable",
    storage=glue.S3TableStorage.managed_bucket(glue.S3TableEncryption.s3_managed()),
    # ...
    database=my_database,
    columns=[glue.Column(
        name="col1",
        type=glue.Schema.STRING
    )],
    data_format=glue.DataFormat.JSON
)

Static Methods

classmethod kms(key=None)

(experimental) Server-side encryption (SSE-KMS) with an AWS KMS key managed by the account owner.

Parameters:

key (Optional[IKey]) – the KMS key used to encrypt the data. A key is created if one is not provided.

Stability:

experimental

Return type:

S3TableEncryption

classmethod kms_managed()

(experimental) Server-side encryption (SSE-KMS) with an AWS KMS key managed by the KMS service.

Stability:

experimental

Return type:

S3TableEncryption

classmethod s3_managed()

(experimental) Server-side encryption (SSE-S3) with an Amazon S3-managed key.

Stability:

experimental

Return type:

S3TableEncryption