StreamEncryption

class aws_cdk.aws_kinesisfirehose_alpha.StreamEncryption(*args: Any, **kwargs)

Bases: object

(experimental) Represents server-side encryption for a Kinesis Firehose Delivery Stream.

Stability:: experimental
ExampleMetadata:: infused

Example:

# destination: firehose.IDestination
# SSE with an customer-managed key that is explicitly specified
# key: kms.Key


# SSE with an AWS-owned key
firehose.DeliveryStream(self, "Delivery Stream with AWS Owned Key",
    encryption=firehose.StreamEncryption.aws_owned_key(),
    destination=destination
)
# SSE with an customer-managed key that is created automatically by the CDK
firehose.DeliveryStream(self, "Delivery Stream with Customer Managed Key",
    encryption=firehose.StreamEncryption.customer_managed_key(),
    destination=destination
)
firehose.DeliveryStream(self, "Delivery Stream with Customer Managed and Provided Key",
    encryption=firehose.StreamEncryption.customer_managed_key(key),
    destination=destination
)

Attributes

encryption_key

(experimental) Optional KMS key used for customer managed encryption.

Stability:: experimental

type

(experimental) The type of server-side encryption for the Kinesis Firehose delivery stream.

Stability:: experimental

Static Methods

classmethod aws_owned_key()

(experimental) Configure server-side encryption using an AWS owned key.

Stability:: experimental
Return type:: StreamEncryption

classmethod customer_managed_key(encryption_key=None)

(experimental) Configure server-side encryption using customer managed keys.

Parameters:: encryption_key (Optional[IKey]) – the KMS key for the delivery stream.
Stability:: experimental
Return type:: StreamEncryption

classmethod unencrypted()

(experimental) No server-side encryption is configured.

Stability:: experimental
Return type:: StreamEncryption