Copyright | (c) 2013-2021 Brendan Hay |
---|---|
License | Mozilla Public License, v. 2.0. |
Maintainer | Brendan Hay <brendan.g.hay+amazonka@gmail.com> |
Stability | auto-generated |
Portability | non-portable (GHC extensions) |
Safe Haskell | None |
Amazonka.Athena.Types.EncryptionConfiguration
Description
Synopsis
Documentation
data EncryptionConfiguration Source #
If query results are encrypted in Amazon S3, indicates the encryption
option used (for example, SSE-KMS
or CSE-KMS
) and key information.
See: newEncryptionConfiguration
smart constructor.
Constructors
EncryptionConfiguration' | |
Fields
|
Instances
newEncryptionConfiguration Source #
Arguments
:: EncryptionOption | |
-> EncryptionConfiguration |
Create a value of EncryptionConfiguration
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:kmsKey:EncryptionConfiguration'
, encryptionConfiguration_kmsKey
- For SSE-KMS
and CSE-KMS
, this is the KMS key ARN or ID.
$sel:encryptionOption:EncryptionConfiguration'
, encryptionConfiguration_encryptionOption
- Indicates whether Amazon S3 server-side encryption with Amazon
S3-managed keys (SSE-S3
), server-side encryption with KMS-managed keys
(SSE-KMS
), or client-side encryption with KMS-managed keys (CSE-KMS)
is used.
If a query runs in a workgroup and the workgroup overrides client-side settings, then the workgroup's setting for encryption is used. It specifies whether query results must be encrypted, for all queries that run in this workgroup.
encryptionConfiguration_kmsKey :: Lens' EncryptionConfiguration (Maybe Text) Source #
For SSE-KMS
and CSE-KMS
, this is the KMS key ARN or ID.
encryptionConfiguration_encryptionOption :: Lens' EncryptionConfiguration EncryptionOption Source #
Indicates whether Amazon S3 server-side encryption with Amazon
S3-managed keys (SSE-S3
), server-side encryption with KMS-managed keys
(SSE-KMS
), or client-side encryption with KMS-managed keys (CSE-KMS)
is used.
If a query runs in a workgroup and the workgroup overrides client-side settings, then the workgroup's setting for encryption is used. It specifies whether query results must be encrypted, for all queries that run in this workgroup.