AWS::Comprehend::Flywheel DataSecurityConfig - AWS CloudFormation

AWS::Comprehend::Flywheel DataSecurityConfig

Data security configuration.

Syntax

To declare this entity in your AWS CloudFormation template, use the following syntax:

JSON

{ "DataLakeKmsKeyId" : String, "ModelKmsKeyId" : String, "VolumeKmsKeyId" : String, "VpcConfig" : VpcConfig }

Properties

DataLakeKmsKeyId

ID for the AWS KMS key that Amazon Comprehend uses to encrypt the data in the data lake.

Required: No

Type: String

Minimum: 1

Maximum: 2048

Update requires: No interruption

ModelKmsKeyId

ID for the AWS KMS key that Amazon Comprehend uses to encrypt trained custom models. The ModelKmsKeyId can be either of the following formats:

  • KMS Key ID: "1234abcd-12ab-34cd-56ef-1234567890ab"

  • Amazon Resource Name (ARN) of a KMS Key: "arn:aws:kms:us-west-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab"

Required: No

Type: String

Minimum: 1

Maximum: 2048

Update requires: No interruption

VolumeKmsKeyId

ID for the AWS KMS key that Amazon Comprehend uses to encrypt the volume.

Required: No

Type: String

Minimum: 1

Maximum: 2048

Update requires: No interruption

VpcConfig

Configuration parameters for an optional private Virtual Private Cloud (VPC) containing the resources you are using for the job. For more information, see Amazon VPC.

Required: No

Type: VpcConfig

Update requires: No interruption