S3Encryption

class aws_cdk.aws_glue_alpha.S3Encryption(*args: Any, **kwargs)

Bases: object

(experimental) S3 encryption configuration for a SecurityConfiguration.

Use {@link S3Encryption.s3Managed} for SSE-S3 or {@link S3Encryption.kms} for SSE-KMS. Because these are separate factories, a KMS key can never be paired with S3-managed encryption.

Stability:: experimental
ExampleMetadata:: infused

Example:

glue.SecurityConfiguration(self, "MySecurityConfiguration",
    cloud_watch_encryption=glue.CloudWatchEncryption.kms(),
    job_bookmarks_encryption=glue.JobBookmarksEncryption.client_side_kms(),
    s3_encryption=glue.S3Encryption.kms()
)

Static Methods

classmethod kms(kms_key=None)

(experimental) Server-side encryption (SSE) with an AWS KMS key managed by the account owner.

Parameters:: kms_key (Optional[IKeyRef]) – the KMS key used to encrypt the data. A key is created if one is not provided.
See:: https://docs.aws.amazon.com/AmazonS3/latest/dev/UsingKMSEncryption.html
Stability:: experimental
Return type:: S3Encryption

classmethod s3_managed()

(experimental) Server-side encryption (SSE) with an Amazon S3-managed key.

See:: https://docs.aws.amazon.com/AmazonS3/latest/dev/UsingServerSideEncryption.html
Stability:: experimental
Return type:: S3Encryption