/AWS1/CL_MWSENCRYPTIONCONF¶
Configuration for encrypting workflow data at rest and in transit. Amazon Managed Workflows for Apache Airflow Serverless provides comprehensive encryption capabilities to protect sensitive workflow data, parameters, and execution logs. When using customer-managed keys, the service integrates with Amazon Web Services KMS to provide fine-grained access control and audit capabilities. Encryption is applied consistently across the distributed execution environment including task containers, metadata storage, and log streams.
CONSTRUCTOR¶
IMPORTING¶
Required arguments:¶
iv_type TYPE /AWS1/MWSENCRYPTIONTYPE /AWS1/MWSENCRYPTIONTYPE¶
The type of encryption to use. Values are
AWS_MANAGED_KEY(Amazon Web Services manages the encryption key) orCUSTOMER_MANAGED_KEY(you provide a KMS key).
Optional arguments:¶
iv_kmskeyid TYPE /AWS1/MWSSTRING /AWS1/MWSSTRING¶
The ID or ARN of the Amazon Web Services KMS key to use for encryption. Required when
TypeisCUSTOMER_MANAGED_KEY.
Queryable Attributes¶
Type¶
The type of encryption to use. Values are
AWS_MANAGED_KEY(Amazon Web Services manages the encryption key) orCUSTOMER_MANAGED_KEY(you provide a KMS key).
Accessible with the following methods¶
| Method | Description |
|---|---|
GET_TYPE() |
Getter for TYPE, with configurable default |
ASK_TYPE() |
Getter for TYPE w/ exceptions if field has no value |
HAS_TYPE() |
Determine if TYPE has a value |
KmsKeyId¶
The ID or ARN of the Amazon Web Services KMS key to use for encryption. Required when
TypeisCUSTOMER_MANAGED_KEY.
Accessible with the following methods¶
| Method | Description |
|---|---|
GET_KMSKEYID() |
Getter for KMSKEYID, with configurable default |
ASK_KMSKEYID() |
Getter for KMSKEYID w/ exceptions if field has no value |
HAS_KMSKEYID() |
Determine if KMSKEYID has a value |