Interface LogsEncryptionConfiguration.Builder

All Superinterfaces:
Buildable, CopyableBuilder<LogsEncryptionConfiguration.Builder,LogsEncryptionConfiguration>, SdkBuilder<LogsEncryptionConfiguration.Builder,LogsEncryptionConfiguration>, SdkPojo
Enclosing class:
LogsEncryptionConfiguration
@Mutable @NotThreadSafe public static interface LogsEncryptionConfiguration.Builder extends SdkPojo, CopyableBuilder<LogsEncryptionConfiguration.Builder,LogsEncryptionConfiguration>

  • Method Details

    • encryptionStrategy

      LogsEncryptionConfiguration.Builder encryptionStrategy(String encryptionStrategy)

      Configuration that determines the encryption strategy of the destination log groups. CUSTOMER_MANAGED uses the configured KmsKeyArn to encrypt newly created destination log groups.

      Parameters:
      encryptionStrategy - Configuration that determines the encryption strategy of the destination log groups. CUSTOMER_MANAGED uses the configured KmsKeyArn to encrypt newly created destination log groups.
      Returns:
      Returns a reference to this object so that method calls can be chained together.
      See Also:

    • encryptionStrategy

      LogsEncryptionConfiguration.Builder encryptionStrategy(EncryptionStrategy encryptionStrategy)

      Configuration that determines the encryption strategy of the destination log groups. CUSTOMER_MANAGED uses the configured KmsKeyArn to encrypt newly created destination log groups.

      Parameters:
      encryptionStrategy - Configuration that determines the encryption strategy of the destination log groups. CUSTOMER_MANAGED uses the configured KmsKeyArn to encrypt newly created destination log groups.
      Returns:
      Returns a reference to this object so that method calls can be chained together.
      See Also:

    • kmsKeyArn

      LogsEncryptionConfiguration.Builder kmsKeyArn(String kmsKeyArn)

      KMS Key ARN belonging to the primary destination account and region, to encrypt newly created central log groups in the primary destination.

      Parameters:
      kmsKeyArn - KMS Key ARN belonging to the primary destination account and region, to encrypt newly created central log groups in the primary destination.
      Returns:
      Returns a reference to this object so that method calls can be chained together.

    • encryptionConflictResolutionStrategy

      LogsEncryptionConfiguration.Builder encryptionConflictResolutionStrategy(String encryptionConflictResolutionStrategy)

      Conflict resolution strategy for centralization if the encryption strategy is set to CUSTOMER_MANAGED and the destination log group is encrypted with an AWS_OWNED KMS Key. ALLOW lets centralization go through while SKIP prevents centralization into the destination log group.

      Parameters:
      encryptionConflictResolutionStrategy - Conflict resolution strategy for centralization if the encryption strategy is set to CUSTOMER_MANAGED and the destination log group is encrypted with an AWS_OWNED KMS Key. ALLOW lets centralization go through while SKIP prevents centralization into the destination log group.
      Returns:
      Returns a reference to this object so that method calls can be chained together.
      See Also:

    • encryptionConflictResolutionStrategy

      LogsEncryptionConfiguration.Builder encryptionConflictResolutionStrategy(EncryptionConflictResolutionStrategy encryptionConflictResolutionStrategy)

      Conflict resolution strategy for centralization if the encryption strategy is set to CUSTOMER_MANAGED and the destination log group is encrypted with an AWS_OWNED KMS Key. ALLOW lets centralization go through while SKIP prevents centralization into the destination log group.

      Parameters:
      encryptionConflictResolutionStrategy - Conflict resolution strategy for centralization if the encryption strategy is set to CUSTOMER_MANAGED and the destination log group is encrypted with an AWS_OWNED KMS Key. ALLOW lets centralization go through while SKIP prevents centralization into the destination log group.
      Returns:
      Returns a reference to this object so that method calls can be chained together.
      See Also:

    • encryptionScope

      LogsEncryptionConfiguration.Builder encryptionScope(String encryptionScope)

      Determines which newly created destination log groups are encrypted with the configured KmsKeyArn when EncryptionStrategy is CUSTOMER_MANAGED.

      If you set this to ENCRYPTED_SOURCE_ONLY (the default), only destination log groups whose source log group is encrypted with a customer managed KMS key use the configured KmsKeyArn. Destination log groups derived from Amazon Web Services owned encrypted source log groups remain Amazon Web Services owned encrypted.

      If you set this to NEW_DESTINATION_LOG_GROUPS, every new destination log group created by this rule uses the configured KmsKeyArn, regardless of the source log group's encryption posture.

      This field is not valid when EncryptionStrategy is AWS_OWNED.

      Parameters:
      encryptionScope - Determines which newly created destination log groups are encrypted with the configured KmsKeyArn when EncryptionStrategy is CUSTOMER_MANAGED.

      If you set this to ENCRYPTED_SOURCE_ONLY (the default), only destination log groups whose source log group is encrypted with a customer managed KMS key use the configured KmsKeyArn. Destination log groups derived from Amazon Web Services owned encrypted source log groups remain Amazon Web Services owned encrypted.

      If you set this to NEW_DESTINATION_LOG_GROUPS, every new destination log group created by this rule uses the configured KmsKeyArn, regardless of the source log group's encryption posture.

      This field is not valid when EncryptionStrategy is AWS_OWNED.

      Returns:
      Returns a reference to this object so that method calls can be chained together.
      See Also:

    • encryptionScope

      LogsEncryptionConfiguration.Builder encryptionScope(EncryptionScope encryptionScope)

      Determines which newly created destination log groups are encrypted with the configured KmsKeyArn when EncryptionStrategy is CUSTOMER_MANAGED.

      If you set this to ENCRYPTED_SOURCE_ONLY (the default), only destination log groups whose source log group is encrypted with a customer managed KMS key use the configured KmsKeyArn. Destination log groups derived from Amazon Web Services owned encrypted source log groups remain Amazon Web Services owned encrypted.

      If you set this to NEW_DESTINATION_LOG_GROUPS, every new destination log group created by this rule uses the configured KmsKeyArn, regardless of the source log group's encryption posture.

      This field is not valid when EncryptionStrategy is AWS_OWNED.

      Parameters:
      encryptionScope - Determines which newly created destination log groups are encrypted with the configured KmsKeyArn when EncryptionStrategy is CUSTOMER_MANAGED.

      If you set this to ENCRYPTED_SOURCE_ONLY (the default), only destination log groups whose source log group is encrypted with a customer managed KMS key use the configured KmsKeyArn. Destination log groups derived from Amazon Web Services owned encrypted source log groups remain Amazon Web Services owned encrypted.

      If you set this to NEW_DESTINATION_LOG_GROUPS, every new destination log group created by this rule uses the configured KmsKeyArn, regardless of the source log group's encryption posture.

      This field is not valid when EncryptionStrategy is AWS_OWNED.

      Returns:
      Returns a reference to this object so that method calls can be chained together.
      See Also: