class TableClientSideEncryption 🔹

Language	Type name
.NET	Amazon.CDK.AWS.Glue.Alpha.TableClientSideEncryption
Go	github.com/aws/aws-cdk-go/awscdkgluealpha/v2#TableClientSideEncryption
Java	software.amazon.awscdk.services.glue.alpha.TableClientSideEncryption
Python	aws_cdk.aws_glue_alpha.TableClientSideEncryption
TypeScript (source)	@aws-cdk/aws-glue-alpha » TableClientSideEncryption

Client-side encryption for an S3Table's data.

Independent of the bucket's server-side encryption and of who owns the bucket: the data is encrypted by the client before it is written to S3. When set, the grant* methods also grant the relevant KMS permissions on the key.

Example

declare const myDatabase: glue.Database;
// KMS key is created automatically
new glue.S3Table(this, 'MyTable', {
  clientSideEncryption: glue.TableClientSideEncryption.kms(),
  // ...
  database: myDatabase,
  columns: [{
    name: 'col1',
    type: glue.Schema.STRING,
  }],
  dataFormat: glue.DataFormat.JSON,
});

// with an explicit KMS key
new glue.S3Table(this, 'MyTable', {
  clientSideEncryption: glue.TableClientSideEncryption.kms(new kms.Key(this, 'MyKey')),
  // ...
  database: myDatabase,
  columns: [{
    name: 'col1',
    type: glue.Schema.STRING,
  }],
  dataFormat: glue.DataFormat.JSON,
});

Methods

Name	Description
static kms(key?)🔹	Client-side encryption (CSE-KMS) with an AWS KMS key managed by the account owner.

---

static kms(key?)🔹

public static kms(key?: IKeyRef): TableClientSideEncryption

Parameters

• key IKeyRef — the KMS key used to encrypt the data.

Returns

• TableClientSideEncryption

Client-side encryption (CSE-KMS) with an AWS KMS key managed by the account owner.