This is the new *CloudFormation Template Reference Guide*. Please update your bookmarks and links. For help getting started with CloudFormation, see the [AWS CloudFormation User Guide](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/Welcome.html).

# AWS::Glue::SecurityConfiguration
<a name="aws-resource-glue-securityconfiguration"></a>

Creates a new security configuration. A security configuration is a set of security properties that can be used by AWS Glue. You can use a security configuration to encrypt data at rest. For information about using security configurations in AWS Glue, see [Encrypting Data Written by Crawlers, Jobs, and Development Endpoints](https://docs.aws.amazon.com/glue/latest/dg/encryption-security-configuration.html).

## Syntax
<a name="aws-resource-glue-securityconfiguration-syntax"></a>

To declare this entity in your CloudFormation template, use the following syntax:

### JSON
<a name="aws-resource-glue-securityconfiguration-syntax.json"></a>

```
{
  "Type" : "AWS::Glue::SecurityConfiguration",
  "Properties" : {
      "[EncryptionConfiguration](#cfn-glue-securityconfiguration-encryptionconfiguration)" : EncryptionConfiguration,
      "[Name](#cfn-glue-securityconfiguration-name)" : String
    }
}
```

### YAML
<a name="aws-resource-glue-securityconfiguration-syntax.yaml"></a>

```
Type: AWS::Glue::SecurityConfiguration
Properties:
  [EncryptionConfiguration](#cfn-glue-securityconfiguration-encryptionconfiguration): 
    EncryptionConfiguration
  [Name](#cfn-glue-securityconfiguration-name): String
```

## Properties
<a name="aws-resource-glue-securityconfiguration-properties"></a>

`EncryptionConfiguration`  <a name="cfn-glue-securityconfiguration-encryptionconfiguration"></a>
The encryption configuration associated with this security configuration.  
*Required*: Yes  
*Type*: [EncryptionConfiguration](aws-properties-glue-securityconfiguration-encryptionconfiguration.md)  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

`Name`  <a name="cfn-glue-securityconfiguration-name"></a>
The name of the security configuration.  
*Required*: Yes  
*Type*: String  
*Pattern*: `[\u0020-\uD7FF\uE000-\uFFFD\uD800\uDC00-\uDBFF\uDFFF\t]*`  
*Minimum*: `1`  
*Maximum*: `255`  
*Update requires*: [Replacement](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-replacement)

## Return values
<a name="aws-resource-glue-securityconfiguration-return-values"></a>

### Ref
<a name="aws-resource-glue-securityconfiguration-return-values-ref"></a>

### Fn::GetAtt
<a name="aws-resource-glue-securityconfiguration-return-values-fn--getatt"></a>

# AWS::Glue::SecurityConfiguration CloudWatchEncryption
<a name="aws-properties-glue-securityconfiguration-cloudwatchencryption"></a>

Specifies how Amazon CloudWatch data should be encrypted.

## Syntax
<a name="aws-properties-glue-securityconfiguration-cloudwatchencryption-syntax"></a>

To declare this entity in your CloudFormation template, use the following syntax:

### JSON
<a name="aws-properties-glue-securityconfiguration-cloudwatchencryption-syntax.json"></a>

```
{
  "[CloudWatchEncryptionMode](#cfn-glue-securityconfiguration-cloudwatchencryption-cloudwatchencryptionmode)" : String,
  "[KmsKeyArn](#cfn-glue-securityconfiguration-cloudwatchencryption-kmskeyarn)" : String
}
```

### YAML
<a name="aws-properties-glue-securityconfiguration-cloudwatchencryption-syntax.yaml"></a>

```
  [CloudWatchEncryptionMode](#cfn-glue-securityconfiguration-cloudwatchencryption-cloudwatchencryptionmode): String
  [KmsKeyArn](#cfn-glue-securityconfiguration-cloudwatchencryption-kmskeyarn): String
```

## Properties
<a name="aws-properties-glue-securityconfiguration-cloudwatchencryption-properties"></a>

`CloudWatchEncryptionMode`  <a name="cfn-glue-securityconfiguration-cloudwatchencryption-cloudwatchencryptionmode"></a>
The encryption mode to use for CloudWatch data.  
*Required*: No  
*Type*: String  
*Allowed values*: `DISABLED | SSE-KMS`  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

`KmsKeyArn`  <a name="cfn-glue-securityconfiguration-cloudwatchencryption-kmskeyarn"></a>
The Amazon Resource Name (ARN) of the KMS key to be used to encrypt the data.  
*Required*: No  
*Type*: String  
*Pattern*: `^$|arn:aws[a-z0-9-]*:kms:.*`  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

# AWS::Glue::SecurityConfiguration EncryptionConfiguration
<a name="aws-properties-glue-securityconfiguration-encryptionconfiguration"></a>

Specifies an encryption configuration.

## Syntax
<a name="aws-properties-glue-securityconfiguration-encryptionconfiguration-syntax"></a>

To declare this entity in your CloudFormation template, use the following syntax:

### JSON
<a name="aws-properties-glue-securityconfiguration-encryptionconfiguration-syntax.json"></a>

```
{
  "[CloudWatchEncryption](#cfn-glue-securityconfiguration-encryptionconfiguration-cloudwatchencryption)" : CloudWatchEncryption,
  "[JobBookmarksEncryption](#cfn-glue-securityconfiguration-encryptionconfiguration-jobbookmarksencryption)" : JobBookmarksEncryption,
  "[S3Encryptions](#cfn-glue-securityconfiguration-encryptionconfiguration-s3encryptions)" : [ S3Encryption, ... ]
}
```

### YAML
<a name="aws-properties-glue-securityconfiguration-encryptionconfiguration-syntax.yaml"></a>

```
  [CloudWatchEncryption](#cfn-glue-securityconfiguration-encryptionconfiguration-cloudwatchencryption): 
    CloudWatchEncryption
  [JobBookmarksEncryption](#cfn-glue-securityconfiguration-encryptionconfiguration-jobbookmarksencryption): 
    JobBookmarksEncryption
  [S3Encryptions](#cfn-glue-securityconfiguration-encryptionconfiguration-s3encryptions): 
    - S3Encryption
```

## Properties
<a name="aws-properties-glue-securityconfiguration-encryptionconfiguration-properties"></a>

`CloudWatchEncryption`  <a name="cfn-glue-securityconfiguration-encryptionconfiguration-cloudwatchencryption"></a>
The encryption configuration for Amazon CloudWatch.  
*Required*: No  
*Type*: [CloudWatchEncryption](aws-properties-glue-securityconfiguration-cloudwatchencryption.md)  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

`JobBookmarksEncryption`  <a name="cfn-glue-securityconfiguration-encryptionconfiguration-jobbookmarksencryption"></a>
The encryption configuration for job bookmarks.  
*Required*: No  
*Type*: [JobBookmarksEncryption](aws-properties-glue-securityconfiguration-jobbookmarksencryption.md)  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

`S3Encryptions`  <a name="cfn-glue-securityconfiguration-encryptionconfiguration-s3encryptions"></a>
The encyption configuration for Amazon Simple Storage Service (Amazon S3) data.  
*Required*: No  
*Type*: Array of [S3Encryption](aws-properties-glue-securityconfiguration-s3encryption.md)  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

# AWS::Glue::SecurityConfiguration JobBookmarksEncryption
<a name="aws-properties-glue-securityconfiguration-jobbookmarksencryption"></a>

Specifies how job bookmark data should be encrypted.

## Syntax
<a name="aws-properties-glue-securityconfiguration-jobbookmarksencryption-syntax"></a>

To declare this entity in your CloudFormation template, use the following syntax:

### JSON
<a name="aws-properties-glue-securityconfiguration-jobbookmarksencryption-syntax.json"></a>

```
{
  "[JobBookmarksEncryptionMode](#cfn-glue-securityconfiguration-jobbookmarksencryption-jobbookmarksencryptionmode)" : String,
  "[KmsKeyArn](#cfn-glue-securityconfiguration-jobbookmarksencryption-kmskeyarn)" : String
}
```

### YAML
<a name="aws-properties-glue-securityconfiguration-jobbookmarksencryption-syntax.yaml"></a>

```
  [JobBookmarksEncryptionMode](#cfn-glue-securityconfiguration-jobbookmarksencryption-jobbookmarksencryptionmode): String
  [KmsKeyArn](#cfn-glue-securityconfiguration-jobbookmarksencryption-kmskeyarn): String
```

## Properties
<a name="aws-properties-glue-securityconfiguration-jobbookmarksencryption-properties"></a>

`JobBookmarksEncryptionMode`  <a name="cfn-glue-securityconfiguration-jobbookmarksencryption-jobbookmarksencryptionmode"></a>
The encryption mode to use for job bookmarks data.  
*Required*: No  
*Type*: String  
*Allowed values*: `DISABLED | CSE-KMS`  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

`KmsKeyArn`  <a name="cfn-glue-securityconfiguration-jobbookmarksencryption-kmskeyarn"></a>
The Amazon Resource Name (ARN) of the KMS key to be used to encrypt the data.  
*Required*: No  
*Type*: String  
*Pattern*: `^$|arn:aws[a-z0-9-]*:kms:.*`  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

# AWS::Glue::SecurityConfiguration S3Encryption
<a name="aws-properties-glue-securityconfiguration-s3encryption"></a>

Specifies how Amazon Simple Storage Service (Amazon S3) data should be encrypted.

## Syntax
<a name="aws-properties-glue-securityconfiguration-s3encryption-syntax"></a>

To declare this entity in your CloudFormation template, use the following syntax:

### JSON
<a name="aws-properties-glue-securityconfiguration-s3encryption-syntax.json"></a>

```
{
  "[KmsKeyArn](#cfn-glue-securityconfiguration-s3encryption-kmskeyarn)" : String,
  "[S3EncryptionMode](#cfn-glue-securityconfiguration-s3encryption-s3encryptionmode)" : String
}
```

### YAML
<a name="aws-properties-glue-securityconfiguration-s3encryption-syntax.yaml"></a>

```
  [KmsKeyArn](#cfn-glue-securityconfiguration-s3encryption-kmskeyarn): String
  [S3EncryptionMode](#cfn-glue-securityconfiguration-s3encryption-s3encryptionmode): String
```

## Properties
<a name="aws-properties-glue-securityconfiguration-s3encryption-properties"></a>

`KmsKeyArn`  <a name="cfn-glue-securityconfiguration-s3encryption-kmskeyarn"></a>
The Amazon Resource Name (ARN) of the KMS key to be used to encrypt the data.  
*Required*: No  
*Type*: String  
*Pattern*: `^$|arn:aws[a-z0-9-]*:kms:.*`  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

`S3EncryptionMode`  <a name="cfn-glue-securityconfiguration-s3encryption-s3encryptionmode"></a>
The encryption mode to use for Amazon S3 data.  
*Required*: No  
*Type*: String  
*Allowed values*: `DISABLED | SSE-KMS | SSE-S3`  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)