/AWS1/CL_SYNS3ENCRYPTIONCONFIG

A structure that contains the configuration of encryption-at-rest settings for canary artifacts that the canary uploads to Amazon S3.

For more information, see Encrypting canary artifacts

CONSTRUCTOR

IMPORTING

Optional arguments:

iv_encryptionmode TYPE /AWS1/SYNENCRYPTIONMODE /AWS1/SYNENCRYPTIONMODE

The encryption method to use for artifacts created by this canary. Specify SSE_S3 to use server-side encryption (SSE) with an Amazon S3-managed key. Specify SSE-KMS to use server-side encryption with a customer-managed KMS key.

If you omit this parameter, an Amazon Web Services-managed KMS key is used.

iv_kmskeyarn TYPE /AWS1/SYNKMSKEYARN /AWS1/SYNKMSKEYARN

The ARN of the customer-managed KMS key to use, if you specify SSE-KMS for EncryptionMode

---

Queryable Attributes

EncryptionMode

The encryption method to use for artifacts created by this canary. Specify SSE_S3 to use server-side encryption (SSE) with an Amazon S3-managed key. Specify SSE-KMS to use server-side encryption with a customer-managed KMS key.

If you omit this parameter, an Amazon Web Services-managed KMS key is used.

Accessible with the following methods

Method	Description
GET_ENCRYPTIONMODE()	Getter for ENCRYPTIONMODE, with configurable default
ASK_ENCRYPTIONMODE()	Getter for ENCRYPTIONMODE w/ exceptions if field has no valu
HAS_ENCRYPTIONMODE()	Determine if ENCRYPTIONMODE has a value

KmsKeyArn

The ARN of the customer-managed KMS key to use, if you specify SSE-KMS for EncryptionMode

Accessible with the following methods

Method	Description
GET_KMSKEYARN()	Getter for KMSKEYARN, with configurable default
ASK_KMSKEYARN()	Getter for KMSKEYARN w/ exceptions if field has no value
HAS_KMSKEYARN()	Determine if KMSKEYARN has a value