Skip to main content

data_catalog_encryption_settings

Creates, updates, deletes, gets or lists a data_catalog_encryption_settings resource.

Overview

Namedata_catalog_encryption_settings
TypeResource
Idaws.glue.data_catalog_encryption_settings

Fields

The following fields are returned by SELECT queries:

NameDatatypeDescription
connection_password_encryptionobjectWhen connection password protection is enabled, the Data Catalog uses a customer-provided key to encrypt the password as part of CreateConnection or UpdateConnection and store it in the ENCRYPTED_PASSWORD field in the connection properties. You can enable catalog encryption or only password encryption.
encryption_at_restobjectSpecifies the encryption-at-rest configuration for the Data Catalog.

Methods

The following methods are available for this resource:

NameAccessible byRequired ParamsOptional ParamsDescription
get_data_catalog_encryption_settingsselectregionRetrieves the security configuration for a specified catalog.
put_data_catalog_encryption_settingsreplaceregion, DataCatalogEncryptionSettingsSets the security configuration for a specified catalog. After the configuration has been set, the specified encryption is applied to every catalog write thereafter.

Parameters

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

NameDatatypeDescription
regionstringAWS region (default: us-east-1)

SELECT examples

Retrieves the security configuration for a specified catalog.

SELECT
connection_password_encryption,
encryption_at_rest
FROM aws.glue.data_catalog_encryption_settings
WHERE region = '{{ region }}' -- required
;

REPLACE examples

Sets the security configuration for a specified catalog. After the configuration has been set, the specified encryption is applied to every catalog write thereafter.

REPLACE aws.glue.data_catalog_encryption_settings
SET
CatalogId = '{{ CatalogId }}',
DataCatalogEncryptionSettings = '{{ DataCatalogEncryptionSettings }}'
WHERE
region = '{{ region }}' --required
AND DataCatalogEncryptionSettings = '{{ DataCatalogEncryptionSettings }}' --required;