CatalogEncryptionOptions

class aws_cdk.aws_glue_alpha.CatalogEncryptionOptions(*, connection_password_encryption=None, encryption_at_rest=None)

Bases: object

(experimental) Encryption configuration for a Glue Data Catalog.

Encryption is fixed at construction: a catalog either carries encryption settings or it does not, which keeps its configuration easy to reason about and avoids order-dependent mutation after the catalog is created.

Parameters:

  • connection_password_encryption (Union[ConnectionPasswordEncryption, Dict[str, Any], None]) – (experimental) Connection-password encryption configuration for the catalog. Default: - connection-password encryption is not managed by CDK

  • encryption_at_rest (Optional[DataCatalogEncryptionAtRest]) – (experimental) Encryption-at-rest configuration for the catalog. Default: - encryption at rest is not managed by CDK (the catalog default applies)

Stability:

experimental

ExampleMetadata:

infused

Example:

import aws_cdk.aws_iam as iam
# key: kms.Key
# role: iam.IRole

glue.Catalog.encrypt_account(self,
    encryption_at_rest=glue.DataCatalogEncryptionAtRest.kms_with_service_role(role, key)
)

Attributes

connection_password_encryption

(experimental) Connection-password encryption configuration for the catalog.

Default:

  • connection-password encryption is not managed by CDK

Stability:

experimental

encryption_at_rest

(experimental) Encryption-at-rest configuration for the catalog.

Default:

  • encryption at rest is not managed by CDK (the catalog default applies)

Stability:

experimental