Sign in Dashboard Get started
  1. Registry
  2. Packages
  3. AWS
  4. API Docs
  5. glue
  6. getDataCatalogEncryptionSettings
Viewing docs for AWS v7.52.1
published on Wednesday, Oct 28, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-aws

aws.glue.getDataCatalogEncryptionSettings

aws logo aws logo
Viewing docs for AWS v7.52.1
published on Wednesday, Oct 28, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-aws

    This data source can be used to fetch information about AWS Glue Data Catalog Encryption Settings.

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as aws from "@pulumi/aws";

const example = aws.glue.getDataCatalogEncryptionSettings({
    id: "123456789123",
});

    import pulumi
import pulumi_aws as aws

example = aws.glue.get_data_catalog_encryption_settings(id="123456789123")

    package main

import (
	"github.com/pulumi/pulumi-aws/sdk/v7/go/aws/glue"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := glue.LookupDataCatalogEncryptionSettings(ctx, &glue.LookupDataCatalogEncryptionSettingsArgs{
			Id: "123456789123",
		}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Aws = Pulumi.Aws;

return await Deployment.RunAsync(() => 
{
    var example = Aws.Glue.GetDataCatalogEncryptionSettings.Invoke(new()
    {
        Id = "123456789123",
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.aws.glue.GlueFunctions;
import com.pulumi.aws.glue.inputs.GetDataCatalogEncryptionSettingsArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var example = GlueFunctions.getDataCatalogEncryptionSettings(GetDataCatalogEncryptionSettingsArgs.builder()
            .id("123456789123")
            .build());

    }
}

    variables:
  example:
    fn::invoke:
      function: aws:glue:getDataCatalogEncryptionSettings
      arguments:
        id: '123456789123'

    terraform {
  required_providers {
    aws = {
      source = "pulumi/aws"
    }
  }
}

data "aws_glue_data_catalog_encryption_settings" "example" {
  id = "123456789123"
}

    Using getDataCatalogEncryptionSettings

    Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

    function getDataCatalogEncryptionSettings(args: GetDataCatalogEncryptionSettingsArgs, opts?: InvokeOptions): Promise<GetDataCatalogEncryptionSettingsResult>
function getDataCatalogEncryptionSettingsOutput(args: GetDataCatalogEncryptionSettingsOutputArgs, opts?: InvokeOutputOptions): Output<GetDataCatalogEncryptionSettingsResult>
    def get_data_catalog_encryption_settings(catalog_id: Optional[str] = None,
                                         region: Optional[str] = None,
                                         opts: Optional[InvokeOptions] = None) -> GetDataCatalogEncryptionSettingsResult
def get_data_catalog_encryption_settings_output(catalog_id: pulumi.Input[Optional[str]] = None,
                                         region: pulumi.Input[Optional[str]] = None,
                                         opts: Optional[InvokeOutputOptions] = None) -> Output[GetDataCatalogEncryptionSettingsResult]
    func LookupDataCatalogEncryptionSettings(ctx *Context, args *LookupDataCatalogEncryptionSettingsArgs, opts ...InvokeOption) (*LookupDataCatalogEncryptionSettingsResult, error)
func LookupDataCatalogEncryptionSettingsOutput(ctx *Context, args *LookupDataCatalogEncryptionSettingsOutputArgs, opts ...InvokeOption) LookupDataCatalogEncryptionSettingsResultOutput

    > Note: This function is named LookupDataCatalogEncryptionSettings in the Go SDK.

    public static class GetDataCatalogEncryptionSettings 
{
    public static Task<GetDataCatalogEncryptionSettingsResult> InvokeAsync(GetDataCatalogEncryptionSettingsArgs args, InvokeOptions? opts = null)
    public static Output<GetDataCatalogEncryptionSettingsResult> Invoke(GetDataCatalogEncryptionSettingsInvokeArgs args, InvokeOptions? opts = null)
    public static Output<GetDataCatalogEncryptionSettingsResult> Invoke(GetDataCatalogEncryptionSettingsInvokeArgs args, InvokeOutputOptions opts)
}
    public static CompletableFuture<GetDataCatalogEncryptionSettingsResult> getDataCatalogEncryptionSettings(GetDataCatalogEncryptionSettingsArgs args, InvokeOptions options)
public static Output<GetDataCatalogEncryptionSettingsResult> getDataCatalogEncryptionSettings(GetDataCatalogEncryptionSettingsArgs args, InvokeOptions options)
public static Output<GetDataCatalogEncryptionSettingsResult> getDataCatalogEncryptionSettings(GetDataCatalogEncryptionSettingsArgs args, InvokeOutputOptions options)

    fn::invoke:
  function: aws:glue/getDataCatalogEncryptionSettings:getDataCatalogEncryptionSettings
  arguments:
    # arguments dictionary
    data "aws_glue_get_data_catalog_encryption_settings" "name" {
    # arguments
}

    The following arguments are supported:

    CatalogId string
    ID of the Data Catalog. This is typically the AWS account ID.
    Region string
    Region where this resource will be managed. Defaults to the Region set in the provider configuration.
    CatalogId string
    ID of the Data Catalog. This is typically the AWS account ID.
    Region string
    Region where this resource will be managed. Defaults to the Region set in the provider configuration.
    catalog_id string
    ID of the Data Catalog. This is typically the AWS account ID.
    region string
    Region where this resource will be managed. Defaults to the Region set in the provider configuration.
    catalogId String
    ID of the Data Catalog. This is typically the AWS account ID.
    region String
    Region where this resource will be managed. Defaults to the Region set in the provider configuration.
    catalogId string
    ID of the Data Catalog. This is typically the AWS account ID.
    region string
    Region where this resource will be managed. Defaults to the Region set in the provider configuration.
    catalog_id str
    ID of the Data Catalog. This is typically the AWS account ID.
    region str
    Region where this resource will be managed. Defaults to the Region set in the provider configuration.
    catalogId String
    ID of the Data Catalog. This is typically the AWS account ID.
    region String
    Region where this resource will be managed. Defaults to the Region set in the provider configuration.

    getDataCatalogEncryptionSettings Result

    The following output properties are available:

    CatalogId string
    DataCatalogEncryptionSettings List<GetDataCatalogEncryptionSettingsDataCatalogEncryptionSetting>
    Security configuration to set. see dataCatalogEncryptionSettings Block.
    Id string
    The provider-assigned unique ID for this managed resource.
    Region string
    CatalogId string
    DataCatalogEncryptionSettings []GetDataCatalogEncryptionSettingsDataCatalogEncryptionSetting
    Security configuration to set. see dataCatalogEncryptionSettings Block.
    Id string
    The provider-assigned unique ID for this managed resource.
    Region string
    catalog_id string
    data_catalog_encryption_settings list(object)
    Security configuration to set. see dataCatalogEncryptionSettings Block.
    id string
    The provider-assigned unique ID for this managed resource.
    region string
    catalogId String
    dataCatalogEncryptionSettings List<GetDataCatalogEncryptionSettingsDataCatalogEncryptionSetting>
    Security configuration to set. see dataCatalogEncryptionSettings Block.
    id String
    The provider-assigned unique ID for this managed resource.
    region String
    catalogId string
    dataCatalogEncryptionSettings GetDataCatalogEncryptionSettingsDataCatalogEncryptionSetting[]
    Security configuration to set. see dataCatalogEncryptionSettings Block.
    id string
    The provider-assigned unique ID for this managed resource.
    region string
    catalog_id str
    data_catalog_encryption_settings Sequence[GetDataCatalogEncryptionSettingsDataCatalogEncryptionSetting]
    Security configuration to set. see dataCatalogEncryptionSettings Block.
    id str
    The provider-assigned unique ID for this managed resource.
    region str
    catalogId String
    dataCatalogEncryptionSettings List<Property Map>
    Security configuration to set. see dataCatalogEncryptionSettings Block.
    id String
    The provider-assigned unique ID for this managed resource.
    region String

    Supporting Types

    GetDataCatalogEncryptionSettingsDataCatalogEncryptionSetting

    ConnectionPasswordEncryptions List<GetDataCatalogEncryptionSettingsDataCatalogEncryptionSettingConnectionPasswordEncryption>
    When connection password protection is enabled, the Data Catalog uses a customer-provided key to encrypt the password as part of CreateConnection or UpdateConnection and store it in the ENCRYPTED_PASSWORD field in the connection properties. You can enable catalog encryption or only password encryption. see connectionPasswordEncryption Block.
    EncryptionAtRests List<GetDataCatalogEncryptionSettingsDataCatalogEncryptionSettingEncryptionAtRest>
    Encryption-at-rest configuration for the Data Catalog. see encryptionAtRest Block.
    ConnectionPasswordEncryptions []GetDataCatalogEncryptionSettingsDataCatalogEncryptionSettingConnectionPasswordEncryption
    When connection password protection is enabled, the Data Catalog uses a customer-provided key to encrypt the password as part of CreateConnection or UpdateConnection and store it in the ENCRYPTED_PASSWORD field in the connection properties. You can enable catalog encryption or only password encryption. see connectionPasswordEncryption Block.
    EncryptionAtRests []GetDataCatalogEncryptionSettingsDataCatalogEncryptionSettingEncryptionAtRest
    Encryption-at-rest configuration for the Data Catalog. see encryptionAtRest Block.
    connection_password_encryptions list(object)
    When connection password protection is enabled, the Data Catalog uses a customer-provided key to encrypt the password as part of CreateConnection or UpdateConnection and store it in the ENCRYPTED_PASSWORD field in the connection properties. You can enable catalog encryption or only password encryption. see connectionPasswordEncryption Block.
    encryption_at_rests list(object)
    Encryption-at-rest configuration for the Data Catalog. see encryptionAtRest Block.
    connectionPasswordEncryptions List<GetDataCatalogEncryptionSettingsDataCatalogEncryptionSettingConnectionPasswordEncryption>
    When connection password protection is enabled, the Data Catalog uses a customer-provided key to encrypt the password as part of CreateConnection or UpdateConnection and store it in the ENCRYPTED_PASSWORD field in the connection properties. You can enable catalog encryption or only password encryption. see connectionPasswordEncryption Block.
    encryptionAtRests List<GetDataCatalogEncryptionSettingsDataCatalogEncryptionSettingEncryptionAtRest>
    Encryption-at-rest configuration for the Data Catalog. see encryptionAtRest Block.
    connectionPasswordEncryptions GetDataCatalogEncryptionSettingsDataCatalogEncryptionSettingConnectionPasswordEncryption[]
    When connection password protection is enabled, the Data Catalog uses a customer-provided key to encrypt the password as part of CreateConnection or UpdateConnection and store it in the ENCRYPTED_PASSWORD field in the connection properties. You can enable catalog encryption or only password encryption. see connectionPasswordEncryption Block.
    encryptionAtRests GetDataCatalogEncryptionSettingsDataCatalogEncryptionSettingEncryptionAtRest[]
    Encryption-at-rest configuration for the Data Catalog. see encryptionAtRest Block.
    connection_password_encryptions Sequence[GetDataCatalogEncryptionSettingsDataCatalogEncryptionSettingConnectionPasswordEncryption]
    When connection password protection is enabled, the Data Catalog uses a customer-provided key to encrypt the password as part of CreateConnection or UpdateConnection and store it in the ENCRYPTED_PASSWORD field in the connection properties. You can enable catalog encryption or only password encryption. see connectionPasswordEncryption Block.
    encryption_at_rests Sequence[GetDataCatalogEncryptionSettingsDataCatalogEncryptionSettingEncryptionAtRest]
    Encryption-at-rest configuration for the Data Catalog. see encryptionAtRest Block.
    connectionPasswordEncryptions List<Property Map>
    When connection password protection is enabled, the Data Catalog uses a customer-provided key to encrypt the password as part of CreateConnection or UpdateConnection and store it in the ENCRYPTED_PASSWORD field in the connection properties. You can enable catalog encryption or only password encryption. see connectionPasswordEncryption Block.
    encryptionAtRests List<Property Map>
    Encryption-at-rest configuration for the Data Catalog. see encryptionAtRest Block.

    GetDataCatalogEncryptionSettingsDataCatalogEncryptionSettingConnectionPasswordEncryption

    AwsKmsKeyId string
    KMS key ARN that is used to encrypt the connection password.
    ReturnConnectionPasswordEncrypted bool
    When set to true, passwords remain encrypted in the responses of GetConnection and GetConnections. This encryption takes effect independently of the catalog encryption.
    AwsKmsKeyId string
    KMS key ARN that is used to encrypt the connection password.
    ReturnConnectionPasswordEncrypted bool
    When set to true, passwords remain encrypted in the responses of GetConnection and GetConnections. This encryption takes effect independently of the catalog encryption.
    aws_kms_key_id string
    KMS key ARN that is used to encrypt the connection password.
    return_connection_password_encrypted bool
    When set to true, passwords remain encrypted in the responses of GetConnection and GetConnections. This encryption takes effect independently of the catalog encryption.
    awsKmsKeyId String
    KMS key ARN that is used to encrypt the connection password.
    returnConnectionPasswordEncrypted Boolean
    When set to true, passwords remain encrypted in the responses of GetConnection and GetConnections. This encryption takes effect independently of the catalog encryption.
    awsKmsKeyId string
    KMS key ARN that is used to encrypt the connection password.
    returnConnectionPasswordEncrypted boolean
    When set to true, passwords remain encrypted in the responses of GetConnection and GetConnections. This encryption takes effect independently of the catalog encryption.
    aws_kms_key_id str
    KMS key ARN that is used to encrypt the connection password.
    return_connection_password_encrypted bool
    When set to true, passwords remain encrypted in the responses of GetConnection and GetConnections. This encryption takes effect independently of the catalog encryption.
    awsKmsKeyId String
    KMS key ARN that is used to encrypt the connection password.
    returnConnectionPasswordEncrypted Boolean
    When set to true, passwords remain encrypted in the responses of GetConnection and GetConnections. This encryption takes effect independently of the catalog encryption.

    GetDataCatalogEncryptionSettingsDataCatalogEncryptionSettingEncryptionAtRest

    CatalogEncryptionMode string
    Encryption-at-rest mode for encrypting Data Catalog data.
    CatalogEncryptionServiceRole string
    ARN of the AWS IAM role used for accessing encrypted Data Catalog data.
    SseAwsKmsKeyId string
    ARN of the AWS KMS key to use for encryption at rest.
    CatalogEncryptionMode string
    Encryption-at-rest mode for encrypting Data Catalog data.
    CatalogEncryptionServiceRole string
    ARN of the AWS IAM role used for accessing encrypted Data Catalog data.
    SseAwsKmsKeyId string
    ARN of the AWS KMS key to use for encryption at rest.
    catalog_encryption_mode string
    Encryption-at-rest mode for encrypting Data Catalog data.
    catalog_encryption_service_role string
    ARN of the AWS IAM role used for accessing encrypted Data Catalog data.
    sse_aws_kms_key_id string
    ARN of the AWS KMS key to use for encryption at rest.
    catalogEncryptionMode String
    Encryption-at-rest mode for encrypting Data Catalog data.
    catalogEncryptionServiceRole String
    ARN of the AWS IAM role used for accessing encrypted Data Catalog data.
    sseAwsKmsKeyId String
    ARN of the AWS KMS key to use for encryption at rest.
    catalogEncryptionMode string
    Encryption-at-rest mode for encrypting Data Catalog data.
    catalogEncryptionServiceRole string
    ARN of the AWS IAM role used for accessing encrypted Data Catalog data.
    sseAwsKmsKeyId string
    ARN of the AWS KMS key to use for encryption at rest.
    catalog_encryption_mode str
    Encryption-at-rest mode for encrypting Data Catalog data.
    catalog_encryption_service_role str
    ARN of the AWS IAM role used for accessing encrypted Data Catalog data.
    sse_aws_kms_key_id str
    ARN of the AWS KMS key to use for encryption at rest.
    catalogEncryptionMode String
    Encryption-at-rest mode for encrypting Data Catalog data.
    catalogEncryptionServiceRole String
    ARN of the AWS IAM role used for accessing encrypted Data Catalog data.
    sseAwsKmsKeyId String
    ARN of the AWS KMS key to use for encryption at rest.

    Package Details

    Repository
    AWS Classic pulumi/pulumi-aws
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the aws Terraform Provider.
    aws logo aws logo
    Viewing docs for AWS v7.52.1
    published on Wednesday, Oct 28, 2026 by Pulumi
    Schema (JSON)
    pulumi/pulumi-aws

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial