Class SecurityConfiguration
java.lang.Object
software.amazon.jsii.JsiiObject
software.constructs.Construct
software.amazon.awscdk.core.Construct
software.amazon.awscdk.core.Resource
software.amazon.awscdk.services.glue.SecurityConfiguration
- All Implemented Interfaces:
IConstruct
,IDependable
,IResource
,ISecurityConfiguration
,software.amazon.jsii.JsiiSerializable
,software.constructs.IConstruct
@Generated(value="jsii-pacmak/1.84.0 (build 5404dcf)",
date="2023-06-19T16:30:42.595Z")
@Stability(Experimental)
public class SecurityConfiguration
extends Resource
implements ISecurityConfiguration
(experimental) A security configuration is a set of security properties that can be used by AWS Glue to encrypt data at rest.
The following scenarios show some of the ways that you can use a security configuration.
- Attach a security configuration to an AWS Glue crawler to write encrypted Amazon CloudWatch Logs.
- Attach a security configuration to an extract, transform, and load (ETL) job to write encrypted Amazon Simple Storage Service (Amazon S3) targets and encrypted CloudWatch Logs.
- Attach a security configuration to an ETL job to write its jobs bookmarks as encrypted Amazon S3 data.
- Attach a security configuration to a development endpoint to write encrypted Amazon S3 targets.
Example:
SecurityConfiguration.Builder.create(this, "MySecurityConfiguration") .securityConfigurationName("name") .cloudWatchEncryption(CloudWatchEncryption.builder() .mode(CloudWatchEncryptionMode.KMS) .build()) .jobBookmarksEncryption(JobBookmarksEncryption.builder() .mode(JobBookmarksEncryptionMode.CLIENT_SIDE_KMS) .build()) .s3Encryption(S3Encryption.builder() .mode(S3EncryptionMode.KMS) .build()) .build();
-
Nested Class Summary
Modifier and TypeClassDescriptionstatic final class
(experimental) A fluent builder forSecurityConfiguration
.Nested classes/interfaces inherited from class software.amazon.jsii.JsiiObject
software.amazon.jsii.JsiiObject.InitializationMode
Nested classes/interfaces inherited from interface software.amazon.awscdk.core.IConstruct
IConstruct.Jsii$Default
Nested classes/interfaces inherited from interface software.constructs.IConstruct
software.constructs.IConstruct.Jsii$Default
Nested classes/interfaces inherited from interface software.amazon.awscdk.core.IResource
IResource.Jsii$Default
Nested classes/interfaces inherited from interface software.amazon.awscdk.services.glue.ISecurityConfiguration
ISecurityConfiguration.Jsii$Default, ISecurityConfiguration.Jsii$Proxy
-
Constructor Summary
ModifierConstructorDescriptionprotected
SecurityConfiguration
(software.amazon.jsii.JsiiObject.InitializationMode initializationMode) protected
SecurityConfiguration
(software.amazon.jsii.JsiiObjectRef objRef) SecurityConfiguration
(software.constructs.Construct scope, String id, SecurityConfigurationProps props) -
Method Summary
Modifier and TypeMethodDescriptionstatic ISecurityConfiguration
fromSecurityConfigurationName
(software.constructs.Construct scope, String id, String securityConfigurationName) (experimental) Creates a Connection construct that represents an external security configuration.(experimental) The KMS key used in CloudWatch encryption if it requires a kms key.(experimental) The KMS key used in job bookmarks encryption if it requires a kms key.(experimental) The KMS key used in S3 encryption if it requires a kms key.(experimental) The name of the security configuration.Methods inherited from class software.amazon.awscdk.core.Resource
applyRemovalPolicy, generatePhysicalName, getEnv, getPhysicalName, getResourceArnAttribute, getResourceNameAttribute, getStack, isResource
Methods inherited from class software.amazon.awscdk.core.Construct
getNode, isConstruct, onPrepare, onSynthesize, onValidate, prepare, synthesize, validate
Methods inherited from class software.constructs.Construct
toString
Methods inherited from class software.amazon.jsii.JsiiObject
jsiiAsyncCall, jsiiAsyncCall, jsiiCall, jsiiCall, jsiiGet, jsiiGet, jsiiSet, jsiiStaticCall, jsiiStaticCall, jsiiStaticGet, jsiiStaticGet, jsiiStaticSet, jsiiStaticSet
Methods inherited from class java.lang.Object
clone, equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, wait
Methods inherited from interface software.amazon.awscdk.core.IConstruct
getNode
Methods inherited from interface software.amazon.awscdk.core.IResource
applyRemovalPolicy, getEnv, getStack
Methods inherited from interface software.amazon.jsii.JsiiSerializable
$jsii$toJson
-
Constructor Details
-
SecurityConfiguration
protected SecurityConfiguration(software.amazon.jsii.JsiiObjectRef objRef) -
SecurityConfiguration
protected SecurityConfiguration(software.amazon.jsii.JsiiObject.InitializationMode initializationMode) -
SecurityConfiguration
@Stability(Experimental) public SecurityConfiguration(@NotNull software.constructs.Construct scope, @NotNull String id, @NotNull SecurityConfigurationProps props) - Parameters:
scope
- This parameter is required.id
- This parameter is required.props
- This parameter is required.
-
-
Method Details
-
fromSecurityConfigurationName
@Stability(Experimental) @NotNull public static ISecurityConfiguration fromSecurityConfigurationName(@NotNull software.constructs.Construct scope, @NotNull String id, @NotNull String securityConfigurationName) (experimental) Creates a Connection construct that represents an external security configuration.- Parameters:
scope
- The scope creating construct (usuallythis
). This parameter is required.id
- The construct's id. This parameter is required.securityConfigurationName
- name of external security configuration. This parameter is required.
-
getSecurityConfigurationName
(experimental) The name of the security configuration.- Specified by:
getSecurityConfigurationName
in interfaceISecurityConfiguration
-
getCloudWatchEncryptionKey
(experimental) The KMS key used in CloudWatch encryption if it requires a kms key. -
getJobBookmarksEncryptionKey
(experimental) The KMS key used in job bookmarks encryption if it requires a kms key. -
getS3EncryptionKey
(experimental) The KMS key used in S3 encryption if it requires a kms key.
-