interface ConnectionPasswordEncryption 🔹

Language	Type name
.NET	Amazon.CDK.AWS.Glue.Alpha.ConnectionPasswordEncryption
Go	github.com/aws/aws-cdk-go/awscdkgluealpha/v2#ConnectionPasswordEncryption
Java	software.amazon.awscdk.services.glue.alpha.ConnectionPasswordEncryption
Python	aws_cdk.aws_glue_alpha.ConnectionPasswordEncryption
TypeScript (source)	@aws-cdk/aws-glue-alpha » ConnectionPasswordEncryption

Connection-password encryption configuration for a Glue Data Catalog.

When enabled, the Data Catalog encrypts the password as part of CreateConnection or UpdateConnection and stores it in the ENCRYPTED_PASSWORD field of the connection properties. This is independent from catalog encryption at rest, and may use a different KMS key.

See also: https://docs.aws.amazon.com/glue/latest/webapi/API_ConnectionPasswordEncryption.html

Example

declare const key: kms.Key;
glue.Catalog.encryptAccount(this, {
  connectionPasswordEncryption: {
    kmsKey: key,
    // Whether GetConnection/GetConnections return the password encrypted (default: true)
    returnConnectionPasswordEncrypted: true,
  },
});

Properties

Name	Type	Description
kmsKey?🔹	IKeyRef	The KMS key used to encrypt connection passwords.
returnConnectionPasswordEncrypted?🔹	boolean	Whether passwords remain encrypted in the responses of GetConnection and GetConnections.

---

kmsKey?🔹

Type: IKeyRef (optional, default: an AWS-managed key is used and the key is not exposed as a grantable resource.)

The KMS key used to encrypt connection passwords.

---

returnConnectionPasswordEncrypted?🔹

Type: boolean (optional, default: true)

Whether passwords remain encrypted in the responses of GetConnection and GetConnections.

This takes effect independently from catalog encryption.