1. Registry
  2. Packages
  3. AWS Cloud Control
  4. API Docs
  5. glue
  6. DataCatalogEncryptionSettings

We recommend new projects start with resources from the AWS provider.

Viewing docs for AWS Cloud Control v1.76.0
published on Monday, Aug 24, 2026 by Pulumi
aws-native logo aws-native logo

We recommend new projects start with resources from the AWS provider.

Viewing docs for AWS Cloud Control v1.76.0
published on Monday, Aug 24, 2026 by Pulumi

    Resource Type definition for AWS::Glue::DataCatalogEncryptionSettings

    Create DataCatalogEncryptionSettings Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new DataCatalogEncryptionSettings(name: string, args: DataCatalogEncryptionSettingsArgs, opts?: CustomResourceOptions);
    @overload
    def DataCatalogEncryptionSettings(resource_name: str,
                                      args: DataCatalogEncryptionSettingsInitArgs,
                                      opts: Optional[ResourceOptions] = None)
    
    @overload
    def DataCatalogEncryptionSettings(resource_name: str,
                                      opts: Optional[ResourceOptions] = None,
                                      catalog_id: Optional[str] = None,
                                      data_catalog_encryption_settings: Optional[DataCatalogEncryptionSettingsArgs] = None)
    func NewDataCatalogEncryptionSettings(ctx *Context, name string, args DataCatalogEncryptionSettingsArgs, opts ...ResourceOption) (*DataCatalogEncryptionSettings, error)
    public DataCatalogEncryptionSettings(string name, DataCatalogEncryptionSettingsArgs args, CustomResourceOptions? opts = null)
    public DataCatalogEncryptionSettings(String name, DataCatalogEncryptionSettingsArgs args)
    public DataCatalogEncryptionSettings(String name, DataCatalogEncryptionSettingsArgs args, CustomResourceOptions options)
    
    type: aws-native:glue:DataCatalogEncryptionSettings
    properties: # The arguments to resource properties.
    options: # Bag of options to control resource's behavior.
    
    
    resource "aws-native_glue_data_catalog_encryption_settings" "name" {
        # resource properties
    }

    Parameters

    name string
    The unique name of the resource.
    args DataCatalogEncryptionSettingsArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args DataCatalogEncryptionSettingsInitArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args DataCatalogEncryptionSettingsArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args DataCatalogEncryptionSettingsArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args DataCatalogEncryptionSettingsArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    DataCatalogEncryptionSettings Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The DataCatalogEncryptionSettings resource accepts the following input properties:

    CatalogId string
    The ID of the Data Catalog in which the settings are created.
    DataCatalogEncryptionSettingsValue Pulumi.AwsNative.Glue.Inputs.DataCatalogEncryptionSettings
    Contains configuration information for maintaining Data Catalog security.
    CatalogId string
    The ID of the Data Catalog in which the settings are created.
    DataCatalogEncryptionSettings DataCatalogEncryptionSettingsTypeArgs
    Contains configuration information for maintaining Data Catalog security.
    catalog_id string
    The ID of the Data Catalog in which the settings are created.
    data_catalog_encryption_settings object
    Contains configuration information for maintaining Data Catalog security.
    catalogId String
    The ID of the Data Catalog in which the settings are created.
    dataCatalogEncryptionSettings DataCatalogEncryptionSettings
    Contains configuration information for maintaining Data Catalog security.
    catalogId string
    The ID of the Data Catalog in which the settings are created.
    dataCatalogEncryptionSettings DataCatalogEncryptionSettings
    Contains configuration information for maintaining Data Catalog security.
    catalog_id str
    The ID of the Data Catalog in which the settings are created.
    data_catalog_encryption_settings DataCatalogEncryptionSettingsArgs
    Contains configuration information for maintaining Data Catalog security.
    catalogId String
    The ID of the Data Catalog in which the settings are created.
    dataCatalogEncryptionSettings Property Map
    Contains configuration information for maintaining Data Catalog security.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the DataCatalogEncryptionSettings resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Id string
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id str
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.

    Supporting Types

    DataCatalogEncryptionSettings, DataCatalogEncryptionSettingsArgs

    Contains configuration information for maintaining Data Catalog security.
    ConnectionPasswordEncryption Pulumi.AwsNative.Glue.Inputs.DataCatalogEncryptionSettingsConnectionPasswordEncryption
    When connection password protection is enabled, the Data Catalog uses a customer-provided key to encrypt the password as part of CreateConnection or UpdateConnection and store it in the ENCRYPTED_PASSWORD field in the connection properties. You can enable catalog encryption or only password encryption.
    EncryptionAtRest Pulumi.AwsNative.Glue.Inputs.DataCatalogEncryptionSettingsEncryptionAtRest
    Specifies the encryption-at-rest configuration for the Data Catalog.
    ConnectionPasswordEncryption DataCatalogEncryptionSettingsConnectionPasswordEncryption
    When connection password protection is enabled, the Data Catalog uses a customer-provided key to encrypt the password as part of CreateConnection or UpdateConnection and store it in the ENCRYPTED_PASSWORD field in the connection properties. You can enable catalog encryption or only password encryption.
    EncryptionAtRest DataCatalogEncryptionSettingsEncryptionAtRest
    Specifies the encryption-at-rest configuration for the Data Catalog.
    connection_password_encryption object
    When connection password protection is enabled, the Data Catalog uses a customer-provided key to encrypt the password as part of CreateConnection or UpdateConnection and store it in the ENCRYPTED_PASSWORD field in the connection properties. You can enable catalog encryption or only password encryption.
    encryption_at_rest object
    Specifies the encryption-at-rest configuration for the Data Catalog.
    connectionPasswordEncryption DataCatalogEncryptionSettingsConnectionPasswordEncryption
    When connection password protection is enabled, the Data Catalog uses a customer-provided key to encrypt the password as part of CreateConnection or UpdateConnection and store it in the ENCRYPTED_PASSWORD field in the connection properties. You can enable catalog encryption or only password encryption.
    encryptionAtRest DataCatalogEncryptionSettingsEncryptionAtRest
    Specifies the encryption-at-rest configuration for the Data Catalog.
    connectionPasswordEncryption DataCatalogEncryptionSettingsConnectionPasswordEncryption
    When connection password protection is enabled, the Data Catalog uses a customer-provided key to encrypt the password as part of CreateConnection or UpdateConnection and store it in the ENCRYPTED_PASSWORD field in the connection properties. You can enable catalog encryption or only password encryption.
    encryptionAtRest DataCatalogEncryptionSettingsEncryptionAtRest
    Specifies the encryption-at-rest configuration for the Data Catalog.
    connection_password_encryption DataCatalogEncryptionSettingsConnectionPasswordEncryption
    When connection password protection is enabled, the Data Catalog uses a customer-provided key to encrypt the password as part of CreateConnection or UpdateConnection and store it in the ENCRYPTED_PASSWORD field in the connection properties. You can enable catalog encryption or only password encryption.
    encryption_at_rest DataCatalogEncryptionSettingsEncryptionAtRest
    Specifies the encryption-at-rest configuration for the Data Catalog.
    connectionPasswordEncryption Property Map
    When connection password protection is enabled, the Data Catalog uses a customer-provided key to encrypt the password as part of CreateConnection or UpdateConnection and store it in the ENCRYPTED_PASSWORD field in the connection properties. You can enable catalog encryption or only password encryption.
    encryptionAtRest Property Map
    Specifies the encryption-at-rest configuration for the Data Catalog.

    DataCatalogEncryptionSettingsConnectionPasswordEncryption, DataCatalogEncryptionSettingsConnectionPasswordEncryptionArgs

    When connection password protection is enabled, the Data Catalog uses a customer-provided key to encrypt the password as part of CreateConnection or UpdateConnection and store it in the ENCRYPTED_PASSWORD field in the connection properties. You can enable catalog encryption or only password encryption.
    KmsKeyId string
    An AWS KMS key that is used to encrypt the connection password.
    ReturnConnectionPasswordEncrypted bool
    When the ReturnConnectionPasswordEncrypted flag is set to 'true', passwords remain encrypted in the responses of GetConnection and GetConnections. This encryption takes effect independently from catalog encryption.
    KmsKeyId string
    An AWS KMS key that is used to encrypt the connection password.
    ReturnConnectionPasswordEncrypted bool
    When the ReturnConnectionPasswordEncrypted flag is set to 'true', passwords remain encrypted in the responses of GetConnection and GetConnections. This encryption takes effect independently from catalog encryption.
    kms_key_id string
    An AWS KMS key that is used to encrypt the connection password.
    return_connection_password_encrypted bool
    When the ReturnConnectionPasswordEncrypted flag is set to 'true', passwords remain encrypted in the responses of GetConnection and GetConnections. This encryption takes effect independently from catalog encryption.
    kmsKeyId String
    An AWS KMS key that is used to encrypt the connection password.
    returnConnectionPasswordEncrypted Boolean
    When the ReturnConnectionPasswordEncrypted flag is set to 'true', passwords remain encrypted in the responses of GetConnection and GetConnections. This encryption takes effect independently from catalog encryption.
    kmsKeyId string
    An AWS KMS key that is used to encrypt the connection password.
    returnConnectionPasswordEncrypted boolean
    When the ReturnConnectionPasswordEncrypted flag is set to 'true', passwords remain encrypted in the responses of GetConnection and GetConnections. This encryption takes effect independently from catalog encryption.
    kms_key_id str
    An AWS KMS key that is used to encrypt the connection password.
    return_connection_password_encrypted bool
    When the ReturnConnectionPasswordEncrypted flag is set to 'true', passwords remain encrypted in the responses of GetConnection and GetConnections. This encryption takes effect independently from catalog encryption.
    kmsKeyId String
    An AWS KMS key that is used to encrypt the connection password.
    returnConnectionPasswordEncrypted Boolean
    When the ReturnConnectionPasswordEncrypted flag is set to 'true', passwords remain encrypted in the responses of GetConnection and GetConnections. This encryption takes effect independently from catalog encryption.

    DataCatalogEncryptionSettingsEncryptionAtRest, DataCatalogEncryptionSettingsEncryptionAtRestArgs

    Specifies the encryption-at-rest configuration for the Data Catalog.
    CatalogEncryptionMode string
    The encryption-at-rest mode for encrypting Data Catalog data.
    CatalogEncryptionServiceRole string
    The role that AWS Glue assumes to encrypt and decrypt the Data Catalog objects on the caller's behalf.
    SseAwsKmsKeyId string
    The ID of the AWS KMS key to use for encryption at rest.
    CatalogEncryptionMode string
    The encryption-at-rest mode for encrypting Data Catalog data.
    CatalogEncryptionServiceRole string
    The role that AWS Glue assumes to encrypt and decrypt the Data Catalog objects on the caller's behalf.
    SseAwsKmsKeyId string
    The ID of the AWS KMS key to use for encryption at rest.
    catalog_encryption_mode string
    The encryption-at-rest mode for encrypting Data Catalog data.
    catalog_encryption_service_role string
    The role that AWS Glue assumes to encrypt and decrypt the Data Catalog objects on the caller's behalf.
    sse_aws_kms_key_id string
    The ID of the AWS KMS key to use for encryption at rest.
    catalogEncryptionMode String
    The encryption-at-rest mode for encrypting Data Catalog data.
    catalogEncryptionServiceRole String
    The role that AWS Glue assumes to encrypt and decrypt the Data Catalog objects on the caller's behalf.
    sseAwsKmsKeyId String
    The ID of the AWS KMS key to use for encryption at rest.
    catalogEncryptionMode string
    The encryption-at-rest mode for encrypting Data Catalog data.
    catalogEncryptionServiceRole string
    The role that AWS Glue assumes to encrypt and decrypt the Data Catalog objects on the caller's behalf.
    sseAwsKmsKeyId string
    The ID of the AWS KMS key to use for encryption at rest.
    catalog_encryption_mode str
    The encryption-at-rest mode for encrypting Data Catalog data.
    catalog_encryption_service_role str
    The role that AWS Glue assumes to encrypt and decrypt the Data Catalog objects on the caller's behalf.
    sse_aws_kms_key_id str
    The ID of the AWS KMS key to use for encryption at rest.
    catalogEncryptionMode String
    The encryption-at-rest mode for encrypting Data Catalog data.
    catalogEncryptionServiceRole String
    The role that AWS Glue assumes to encrypt and decrypt the Data Catalog objects on the caller's behalf.
    sseAwsKmsKeyId String
    The ID of the AWS KMS key to use for encryption at rest.

    Package Details

    Repository
    AWS Native pulumi/pulumi-aws-native
    License
    Apache-2.0
    aws-native logo aws-native logo

    We recommend new projects start with resources from the AWS provider.

    Viewing docs for AWS Cloud Control v1.76.0
    published on Monday, Aug 24, 2026 by Pulumi

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial