software.amazon.awssdk.services.sagemaker.model

Interface OnlineStoreSecurityConfig.Builder

All Superinterfaces:

Buildable, CopyableBuilder<OnlineStoreSecurityConfig.Builder,OnlineStoreSecurityConfig>, SdkBuilder<OnlineStoreSecurityConfig.Builder,OnlineStoreSecurityConfig>, SdkPojo

Enclosing class:

OnlineStoreSecurityConfig

public static interface OnlineStoreSecurityConfig.Builder
extends SdkPojo, CopyableBuilder<OnlineStoreSecurityConfig.Builder,OnlineStoreSecurityConfig>

Method Summary

Modifier and Type	Method and Description
OnlineStoreSecurityConfig.Builder	kmsKeyId(String kmsKeyId) The ID of the Amazon Web Services Key Management Service (Amazon Web Services KMS) key that SageMaker Feature Store uses to encrypt the Amazon S3 objects at rest using Amazon S3 server-side encryption.

Methods inherited from interface software.amazon.awssdk.core.SdkPojo

equalsBySdkFields, sdkFields

Methods inherited from interface software.amazon.awssdk.utils.builder.CopyableBuilder

copy

Methods inherited from interface software.amazon.awssdk.utils.builder.SdkBuilder

applyMutation, build

Method Detail

kmsKeyId

OnlineStoreSecurityConfig.Builder kmsKeyId(String kmsKeyId)

The ID of the Amazon Web Services Key Management Service (Amazon Web Services KMS) key that SageMaker Feature Store uses to encrypt the Amazon S3 objects at rest using Amazon S3 server-side encryption.

The caller (either IAM user or IAM role) of CreateFeatureGroup must have below permissions to the OnlineStore KmsKeyId:

• "kms:Encrypt"

• "kms:Decrypt"

• "kms:DescribeKey"

• "kms:CreateGrant"

• "kms:RetireGrant"

• "kms:ReEncryptFrom"

• "kms:ReEncryptTo"

• "kms:GenerateDataKey"

• "kms:ListAliases"

• "kms:ListGrants"

• "kms:RevokeGrant"

The caller (either user or IAM role) to all DataPlane operations (PutRecord, GetRecord, DeleteRecord) must have the following permissions to the KmsKeyId:

• "kms:Decrypt"

Parameters:

kmsKeyId - The ID of the Amazon Web Services Key Management Service (Amazon Web Services KMS) key that SageMaker Feature Store uses to encrypt the Amazon S3 objects at rest using Amazon S3 server-side encryption.

The caller (either IAM user or IAM role) of CreateFeatureGroup must have below permissions to the OnlineStore KmsKeyId:

• "kms:Encrypt"

• "kms:Decrypt"

• "kms:DescribeKey"

• "kms:CreateGrant"

• "kms:RetireGrant"

• "kms:ReEncryptFrom"

• "kms:ReEncryptTo"

• "kms:GenerateDataKey"

• "kms:ListAliases"

• "kms:ListGrants"

• "kms:RevokeGrant"

The caller (either user or IAM role) to all DataPlane operations (PutRecord, GetRecord, DeleteRecord) must have the following permissions to the KmsKeyId:

• "kms:Decrypt"

Returns:

Returns a reference to this object so that method calls can be chained together.