Class: AWSCDK::S3::CfnBucket::EncryptionConfigurationProperty

Inherits:
Jsii::Struct
  • Object
show all
Defined in:
s3/cfn_bucket.rb

Overview

Specifies encryption-related information for an Amazon S3 bucket that is a destination for replicated objects.

If you're specifying a customer managed KMS key, we recommend using a fully qualified KMS key ARN. If you use a KMS key alias instead, then AWS resolves the key within the requester’s account. This behavior can result in data that's encrypted with a KMS key that belongs to the requester, and not the bucket owner.

Instance Attribute Summary collapse

Class Method Summary collapse

Instance Method Summary collapse

Constructor Details

#initialize(replica_kms_key_id:) ⇒ EncryptionConfigurationProperty

Returns a new instance of EncryptionConfigurationProperty.

Parameters:

  • replica_kms_key_id (String)

    Specifies the ID (Key ARN or Alias ARN) of the customer managed AWS KMS key stored in AWS Key Management Service (KMS) for the destination bucket.



1660
1661
1662
1663
# File 's3/cfn_bucket.rb', line 1660

def initialize(replica_kms_key_id:)
  @replica_kms_key_id = replica_kms_key_id
  Jsii::Type.check_type(@replica_kms_key_id, JSON.parse(Base64.strict_decode64("eyJwcmltaXRpdmUiOiJzdHJpbmcifQ==")), "replicaKmsKeyId")
end

Instance Attribute Details

#replica_kms_key_idString (readonly)

Specifies the ID (Key ARN or Alias ARN) of the customer managed AWS KMS key stored in AWS Key Management Service (KMS) for the destination bucket.

Amazon S3 uses this key to encrypt replica objects. Amazon S3 only supports symmetric encryption KMS keys. For more information, see Asymmetric keys in AWS KMS in the AWS Key Management Service Developer Guide .



1671
1672
1673
# File 's3/cfn_bucket.rb', line 1671

def replica_kms_key_id
  @replica_kms_key_id
end

Class Method Details

.jsii_propertiesObject



1673
1674
1675
1676
1677
# File 's3/cfn_bucket.rb', line 1673

def self.jsii_properties
  {
    :replica_kms_key_id => "replicaKmsKeyId",
  }
end

Instance Method Details

#to_jsiiObject



1679
1680
1681
1682
1683
1684
1685
# File 's3/cfn_bucket.rb', line 1679

def to_jsii
  result = {}
  result.merge!({
    "replicaKmsKeyId" => @replica_kms_key_id,
  })
  result.compact
end