1. Registry
  2. Packages
  3. AWS Cloud Control
  4. API Docs
  5. glue
  6. getDataCatalogEncryptionSettings

We recommend new projects start with resources from the AWS provider.

Viewing docs for AWS Cloud Control v1.76.0
published on Monday, Aug 24, 2026 by Pulumi
aws-native logo aws-native logo

We recommend new projects start with resources from the AWS provider.

Viewing docs for AWS Cloud Control v1.76.0
published on Monday, Aug 24, 2026 by Pulumi

    Resource Type definition for AWS::Glue::DataCatalogEncryptionSettings

    Using getDataCatalogEncryptionSettings

    Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

    function getDataCatalogEncryptionSettings(args: GetDataCatalogEncryptionSettingsArgs, opts?: InvokeOptions): Promise<GetDataCatalogEncryptionSettingsResult>
    function getDataCatalogEncryptionSettingsOutput(args: GetDataCatalogEncryptionSettingsOutputArgs, opts?: InvokeOutputOptions): Output<GetDataCatalogEncryptionSettingsResult>
    def get_data_catalog_encryption_settings(catalog_id: Optional[str] = None,
                                             opts: Optional[InvokeOptions] = None) -> GetDataCatalogEncryptionSettingsResult
    def get_data_catalog_encryption_settings_output(catalog_id: pulumi.Input[Optional[str]] = None,
                                             opts: Optional[InvokeOutputOptions] = None) -> Output[GetDataCatalogEncryptionSettingsResult]
    func LookupDataCatalogEncryptionSettings(ctx *Context, args *LookupDataCatalogEncryptionSettingsArgs, opts ...InvokeOption) (*LookupDataCatalogEncryptionSettingsResult, error)
    func LookupDataCatalogEncryptionSettingsOutput(ctx *Context, args *LookupDataCatalogEncryptionSettingsOutputArgs, opts ...InvokeOption) LookupDataCatalogEncryptionSettingsResultOutput

    > Note: This function is named LookupDataCatalogEncryptionSettings in the Go SDK.

    public static class GetDataCatalogEncryptionSettings 
    {
        public static Task<GetDataCatalogEncryptionSettingsResult> InvokeAsync(GetDataCatalogEncryptionSettingsArgs args, InvokeOptions? opts = null)
        public static Output<GetDataCatalogEncryptionSettingsResult> Invoke(GetDataCatalogEncryptionSettingsInvokeArgs args, InvokeOptions? opts = null)
        public static Output<GetDataCatalogEncryptionSettingsResult> Invoke(GetDataCatalogEncryptionSettingsInvokeArgs args, InvokeOutputOptions opts)
    }
    public static CompletableFuture<GetDataCatalogEncryptionSettingsResult> getDataCatalogEncryptionSettings(GetDataCatalogEncryptionSettingsArgs args, InvokeOptions options)
    public static Output<GetDataCatalogEncryptionSettingsResult> getDataCatalogEncryptionSettings(GetDataCatalogEncryptionSettingsArgs args, InvokeOptions options)
    public static Output<GetDataCatalogEncryptionSettingsResult> getDataCatalogEncryptionSettings(GetDataCatalogEncryptionSettingsArgs args, InvokeOutputOptions options)
    
    fn::invoke:
      function: aws-native:glue:getDataCatalogEncryptionSettings
      arguments:
        # arguments dictionary
    data "aws-native_glue_get_data_catalog_encryption_settings" "name" {
        # arguments
    }

    The following arguments are supported:

    CatalogId string
    The ID of the Data Catalog in which the settings are created.
    CatalogId string
    The ID of the Data Catalog in which the settings are created.
    catalog_id string
    The ID of the Data Catalog in which the settings are created.
    catalogId String
    The ID of the Data Catalog in which the settings are created.
    catalogId string
    The ID of the Data Catalog in which the settings are created.
    catalog_id str
    The ID of the Data Catalog in which the settings are created.
    catalogId String
    The ID of the Data Catalog in which the settings are created.

    getDataCatalogEncryptionSettings Result

    The following output properties are available:

    DataCatalogEncryptionSettingsValue Pulumi.AwsNative.Glue.Outputs.DataCatalogEncryptionSettings
    Contains configuration information for maintaining Data Catalog security.
    DataCatalogEncryptionSettings DataCatalogEncryptionSettingsType
    Contains configuration information for maintaining Data Catalog security.
    data_catalog_encryption_settings object
    Contains configuration information for maintaining Data Catalog security.
    dataCatalogEncryptionSettings DataCatalogEncryptionSettings
    Contains configuration information for maintaining Data Catalog security.
    dataCatalogEncryptionSettings DataCatalogEncryptionSettings
    Contains configuration information for maintaining Data Catalog security.
    data_catalog_encryption_settings DataCatalogEncryptionSettings
    Contains configuration information for maintaining Data Catalog security.
    dataCatalogEncryptionSettings Property Map
    Contains configuration information for maintaining Data Catalog security.

    Supporting Types

    DataCatalogEncryptionSettings

    ConnectionPasswordEncryption Pulumi.AwsNative.Glue.Inputs.DataCatalogEncryptionSettingsConnectionPasswordEncryption
    When connection password protection is enabled, the Data Catalog uses a customer-provided key to encrypt the password as part of CreateConnection or UpdateConnection and store it in the ENCRYPTED_PASSWORD field in the connection properties. You can enable catalog encryption or only password encryption.
    EncryptionAtRest Pulumi.AwsNative.Glue.Inputs.DataCatalogEncryptionSettingsEncryptionAtRest
    Specifies the encryption-at-rest configuration for the Data Catalog.
    ConnectionPasswordEncryption DataCatalogEncryptionSettingsConnectionPasswordEncryption
    When connection password protection is enabled, the Data Catalog uses a customer-provided key to encrypt the password as part of CreateConnection or UpdateConnection and store it in the ENCRYPTED_PASSWORD field in the connection properties. You can enable catalog encryption or only password encryption.
    EncryptionAtRest DataCatalogEncryptionSettingsEncryptionAtRest
    Specifies the encryption-at-rest configuration for the Data Catalog.
    connection_password_encryption object
    When connection password protection is enabled, the Data Catalog uses a customer-provided key to encrypt the password as part of CreateConnection or UpdateConnection and store it in the ENCRYPTED_PASSWORD field in the connection properties. You can enable catalog encryption or only password encryption.
    encryption_at_rest object
    Specifies the encryption-at-rest configuration for the Data Catalog.
    connectionPasswordEncryption DataCatalogEncryptionSettingsConnectionPasswordEncryption
    When connection password protection is enabled, the Data Catalog uses a customer-provided key to encrypt the password as part of CreateConnection or UpdateConnection and store it in the ENCRYPTED_PASSWORD field in the connection properties. You can enable catalog encryption or only password encryption.
    encryptionAtRest DataCatalogEncryptionSettingsEncryptionAtRest
    Specifies the encryption-at-rest configuration for the Data Catalog.
    connectionPasswordEncryption DataCatalogEncryptionSettingsConnectionPasswordEncryption
    When connection password protection is enabled, the Data Catalog uses a customer-provided key to encrypt the password as part of CreateConnection or UpdateConnection and store it in the ENCRYPTED_PASSWORD field in the connection properties. You can enable catalog encryption or only password encryption.
    encryptionAtRest DataCatalogEncryptionSettingsEncryptionAtRest
    Specifies the encryption-at-rest configuration for the Data Catalog.
    connection_password_encryption DataCatalogEncryptionSettingsConnectionPasswordEncryption
    When connection password protection is enabled, the Data Catalog uses a customer-provided key to encrypt the password as part of CreateConnection or UpdateConnection and store it in the ENCRYPTED_PASSWORD field in the connection properties. You can enable catalog encryption or only password encryption.
    encryption_at_rest DataCatalogEncryptionSettingsEncryptionAtRest
    Specifies the encryption-at-rest configuration for the Data Catalog.
    connectionPasswordEncryption Property Map
    When connection password protection is enabled, the Data Catalog uses a customer-provided key to encrypt the password as part of CreateConnection or UpdateConnection and store it in the ENCRYPTED_PASSWORD field in the connection properties. You can enable catalog encryption or only password encryption.
    encryptionAtRest Property Map
    Specifies the encryption-at-rest configuration for the Data Catalog.

    DataCatalogEncryptionSettingsConnectionPasswordEncryption

    KmsKeyId string
    An AWS KMS key that is used to encrypt the connection password.
    ReturnConnectionPasswordEncrypted bool
    When the ReturnConnectionPasswordEncrypted flag is set to 'true', passwords remain encrypted in the responses of GetConnection and GetConnections. This encryption takes effect independently from catalog encryption.
    KmsKeyId string
    An AWS KMS key that is used to encrypt the connection password.
    ReturnConnectionPasswordEncrypted bool
    When the ReturnConnectionPasswordEncrypted flag is set to 'true', passwords remain encrypted in the responses of GetConnection and GetConnections. This encryption takes effect independently from catalog encryption.
    kms_key_id string
    An AWS KMS key that is used to encrypt the connection password.
    return_connection_password_encrypted bool
    When the ReturnConnectionPasswordEncrypted flag is set to 'true', passwords remain encrypted in the responses of GetConnection and GetConnections. This encryption takes effect independently from catalog encryption.
    kmsKeyId String
    An AWS KMS key that is used to encrypt the connection password.
    returnConnectionPasswordEncrypted Boolean
    When the ReturnConnectionPasswordEncrypted flag is set to 'true', passwords remain encrypted in the responses of GetConnection and GetConnections. This encryption takes effect independently from catalog encryption.
    kmsKeyId string
    An AWS KMS key that is used to encrypt the connection password.
    returnConnectionPasswordEncrypted boolean
    When the ReturnConnectionPasswordEncrypted flag is set to 'true', passwords remain encrypted in the responses of GetConnection and GetConnections. This encryption takes effect independently from catalog encryption.
    kms_key_id str
    An AWS KMS key that is used to encrypt the connection password.
    return_connection_password_encrypted bool
    When the ReturnConnectionPasswordEncrypted flag is set to 'true', passwords remain encrypted in the responses of GetConnection and GetConnections. This encryption takes effect independently from catalog encryption.
    kmsKeyId String
    An AWS KMS key that is used to encrypt the connection password.
    returnConnectionPasswordEncrypted Boolean
    When the ReturnConnectionPasswordEncrypted flag is set to 'true', passwords remain encrypted in the responses of GetConnection and GetConnections. This encryption takes effect independently from catalog encryption.

    DataCatalogEncryptionSettingsEncryptionAtRest

    CatalogEncryptionMode string
    The encryption-at-rest mode for encrypting Data Catalog data.
    CatalogEncryptionServiceRole string
    The role that AWS Glue assumes to encrypt and decrypt the Data Catalog objects on the caller's behalf.
    SseAwsKmsKeyId string
    The ID of the AWS KMS key to use for encryption at rest.
    CatalogEncryptionMode string
    The encryption-at-rest mode for encrypting Data Catalog data.
    CatalogEncryptionServiceRole string
    The role that AWS Glue assumes to encrypt and decrypt the Data Catalog objects on the caller's behalf.
    SseAwsKmsKeyId string
    The ID of the AWS KMS key to use for encryption at rest.
    catalog_encryption_mode string
    The encryption-at-rest mode for encrypting Data Catalog data.
    catalog_encryption_service_role string
    The role that AWS Glue assumes to encrypt and decrypt the Data Catalog objects on the caller's behalf.
    sse_aws_kms_key_id string
    The ID of the AWS KMS key to use for encryption at rest.
    catalogEncryptionMode String
    The encryption-at-rest mode for encrypting Data Catalog data.
    catalogEncryptionServiceRole String
    The role that AWS Glue assumes to encrypt and decrypt the Data Catalog objects on the caller's behalf.
    sseAwsKmsKeyId String
    The ID of the AWS KMS key to use for encryption at rest.
    catalogEncryptionMode string
    The encryption-at-rest mode for encrypting Data Catalog data.
    catalogEncryptionServiceRole string
    The role that AWS Glue assumes to encrypt and decrypt the Data Catalog objects on the caller's behalf.
    sseAwsKmsKeyId string
    The ID of the AWS KMS key to use for encryption at rest.
    catalog_encryption_mode str
    The encryption-at-rest mode for encrypting Data Catalog data.
    catalog_encryption_service_role str
    The role that AWS Glue assumes to encrypt and decrypt the Data Catalog objects on the caller's behalf.
    sse_aws_kms_key_id str
    The ID of the AWS KMS key to use for encryption at rest.
    catalogEncryptionMode String
    The encryption-at-rest mode for encrypting Data Catalog data.
    catalogEncryptionServiceRole String
    The role that AWS Glue assumes to encrypt and decrypt the Data Catalog objects on the caller's behalf.
    sseAwsKmsKeyId String
    The ID of the AWS KMS key to use for encryption at rest.

    Package Details

    Repository
    AWS Native pulumi/pulumi-aws-native
    License
    Apache-2.0
    aws-native logo aws-native logo

    We recommend new projects start with resources from the AWS provider.

    Viewing docs for AWS Cloud Control v1.76.0
    published on Monday, Aug 24, 2026 by Pulumi

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial