AWS::Comprehend::Flywheel DataSecurityConfig
Data security configuration.
Syntax
To declare this entity in your AWS CloudFormation template, use the following syntax:
JSON
{ "DataLakeKmsKeyId" :
String
, "ModelKmsKeyId" :String
, "VolumeKmsKeyId" :String
, "VpcConfig" :VpcConfig
}
YAML
DataLakeKmsKeyId:
String
ModelKmsKeyId:String
VolumeKmsKeyId:String
VpcConfig:VpcConfig
Properties
DataLakeKmsKeyId
-
ID for the AWS KMS key that Amazon Comprehend uses to encrypt the data in the data lake.
Required: No
Type: String
Minimum:
1
Maximum:
2048
Update requires: No interruption
ModelKmsKeyId
-
ID for the AWS KMS key that Amazon Comprehend uses to encrypt trained custom models. The ModelKmsKeyId can be either of the following formats:
-
KMS Key ID:
"1234abcd-12ab-34cd-56ef-1234567890ab"
-
Amazon Resource Name (ARN) of a KMS Key:
"arn:aws:kms:us-west-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab"
Required: No
Type: String
Minimum:
1
Maximum:
2048
Update requires: No interruption
-
VolumeKmsKeyId
-
ID for the AWS KMS key that Amazon Comprehend uses to encrypt the volume.
Required: No
Type: String
Minimum:
1
Maximum:
2048
Update requires: No interruption
VpcConfig
-
Configuration parameters for an optional private Virtual Private Cloud (VPC) containing the resources you are using for the job. For more information, see Amazon VPC.
Required: No
Type: VpcConfig
Update requires: No interruption