software.amazon.awscdk.services.glue

Class SecurityConfiguration

java.lang.Object

software.amazon.jsii.JsiiObject

software.constructs.Construct

software.amazon.awscdk.core.Construct

software.amazon.awscdk.core.Resource

software.amazon.awscdk.services.glue.SecurityConfiguration

All Implemented Interfaces:

IDependable, IResource, ISecurityConfiguration, software.amazon.jsii.JsiiSerializable, software.constructs.IConstruct

@Generated(value="jsii-pacmak/1.67.0 (build 2c027f5)",
           date="2022-09-07T23:47:07.738Z")
 @Stability(value=Experimental)
public class SecurityConfiguration
extends Resource
implements ISecurityConfiguration

(experimental) A security configuration is a set of security properties that can be used by AWS Glue to encrypt data at rest.

The following scenarios show some of the ways that you can use a security configuration.

• Attach a security configuration to an AWS Glue crawler to write encrypted Amazon CloudWatch Logs.
• Attach a security configuration to an extract, transform, and load (ETL) job to write encrypted Amazon Simple Storage Service (Amazon S3) targets and encrypted CloudWatch Logs.
• Attach a security configuration to an ETL job to write its jobs bookmarks as encrypted Amazon S3 data.
• Attach a security configuration to a development endpoint to write encrypted Amazon S3 targets.

Example:

 SecurityConfiguration.Builder.create(this, "MySecurityConfiguration")
         .securityConfigurationName("name")
         .cloudWatchEncryption(CloudWatchEncryption.builder()
                 .mode(CloudWatchEncryptionMode.KMS)
                 .build())
         .jobBookmarksEncryption(JobBookmarksEncryption.builder()
                 .mode(JobBookmarksEncryptionMode.CLIENT_SIDE_KMS)
                 .build())
         .s3Encryption(S3Encryption.builder()
                 .mode(S3EncryptionMode.KMS)
                 .build())
         .build();
 

Nested Class Summary

Nested Classes

Modifier and Type	Class and Description
static class	SecurityConfiguration.Builder (experimental) A fluent builder for SecurityConfiguration.

Nested classes/interfaces inherited from class software.amazon.jsii.JsiiObject

software.amazon.jsii.JsiiObject.InitializationMode

Nested classes/interfaces inherited from interface software.amazon.awscdk.services.glue.ISecurityConfiguration

ISecurityConfiguration.Jsii$Default, ISecurityConfiguration.Jsii$Proxy

Constructor Summary

Constructors

Modifier	Constructor and Description
	SecurityConfiguration(software.constructs.Construct scope, String id, SecurityConfigurationProps props)
protected	SecurityConfiguration(software.amazon.jsii.JsiiObject.InitializationMode initializationMode)
protected	SecurityConfiguration(software.amazon.jsii.JsiiObjectRef objRef)

Method Summary

Modifier and Type	Method and Description
static ISecurityConfiguration	fromSecurityConfigurationName(software.constructs.Construct scope, String id, String securityConfigurationName) (experimental) Creates a Connection construct that represents an external security configuration.
IKey	getCloudWatchEncryptionKey() (experimental) The KMS key used in CloudWatch encryption if it requires a kms key.
IKey	getJobBookmarksEncryptionKey() (experimental) The KMS key used in job bookmarks encryption if it requires a kms key.
IKey	getS3EncryptionKey() (experimental) The KMS key used in S3 encryption if it requires a kms key.
String	getSecurityConfigurationName() (experimental) The name of the security configuration.

Methods inherited from class software.amazon.awscdk.core.Resource

applyRemovalPolicy, generatePhysicalName, getEnv, getPhysicalName, getResourceArnAttribute, getResourceNameAttribute, getStack, isResource

Methods inherited from class software.amazon.awscdk.core.Construct

getNode, isConstruct, onPrepare, onSynthesize, onValidate, prepare, synthesize, validate

Methods inherited from class software.constructs.Construct

toString

Methods inherited from class software.amazon.jsii.JsiiObject

jsiiAsyncCall, jsiiAsyncCall, jsiiCall, jsiiCall, jsiiGet, jsiiGet, jsiiSet, jsiiStaticCall, jsiiStaticCall, jsiiStaticGet, jsiiStaticGet, jsiiStaticSet, jsiiStaticSet

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, wait

Methods inherited from interface software.amazon.awscdk.core.IResource

applyRemovalPolicy, getEnv, getStack

Methods inherited from interface software.amazon.awscdk.core.IConstruct

getNode

Methods inherited from interface software.amazon.jsii.JsiiSerializable

$jsii$toJson

Constructor Detail

SecurityConfiguration

protected SecurityConfiguration(software.amazon.jsii.JsiiObjectRef objRef)

SecurityConfiguration

protected SecurityConfiguration(software.amazon.jsii.JsiiObject.InitializationMode initializationMode)

SecurityConfiguration

@Stability(value=Experimental)
public SecurityConfiguration(@NotNull
                                                            software.constructs.Construct scope,
                                                            @NotNull
                                                            String id,
                                                            @NotNull
                                                            SecurityConfigurationProps props)

Parameters:

scope - This parameter is required.

id - This parameter is required.

props - This parameter is required.

Method Detail

fromSecurityConfigurationName

@Stability(value=Experimental)
 @NotNull
public static ISecurityConfiguration fromSecurityConfigurationName(@NotNull
                                                                                                            software.constructs.Construct scope,
                                                                                                            @NotNull
                                                                                                            String id,
                                                                                                            @NotNull
                                                                                                            String securityConfigurationName)

(experimental) Creates a Connection construct that represents an external security configuration.

Parameters:

scope - The scope creating construct (usually `this`). This parameter is required.

id - The construct's id. This parameter is required.

securityConfigurationName - name of external security configuration. This parameter is required.

getSecurityConfigurationName

@Stability(value=Experimental)
 @NotNull
public String getSecurityConfigurationName()

(experimental) The name of the security configuration.

Specified by:

getSecurityConfigurationName in interface ISecurityConfiguration

getCloudWatchEncryptionKey

@Stability(value=Experimental)
 @Nullable
public IKey getCloudWatchEncryptionKey()

(experimental) The KMS key used in CloudWatch encryption if it requires a kms key.

getJobBookmarksEncryptionKey

@Stability(value=Experimental)
 @Nullable
public IKey getJobBookmarksEncryptionKey()

(experimental) The KMS key used in job bookmarks encryption if it requires a kms key.

getS3EncryptionKey

@Stability(value=Experimental)
 @Nullable
public IKey getS3EncryptionKey()

(experimental) The KMS key used in S3 encryption if it requires a kms key.