Skip to content

RdsDbSnapshotConfiguration

Source code in docs_src/capo_accessanalyzer/types/rds_db_snapshot_configuration.py
class RdsDbSnapshotConfiguration(TypedDict, closed=True):
    attributes: NotRequired[
        "capo_accessanalyzer.types.rds_db_snapshot_attributes_map.RdsDbSnapshotAttributesMap"
    ]
    """<p>The names and values of manual DB snapshot attributes. Manual DB snapshot attributes are used to authorize other Amazon Web Services accounts to restore a manual DB snapshot. The only valid value for <code>attributeName</code> for the attribute map is restore.</p>"""
    kms_key_id: NotRequired[
        "capo_accessanalyzer.types.rds_db_snapshot_kms_key_id.RdsDbSnapshotKmsKeyId"
    ]
    """<p>The KMS key identifier for an encrypted Amazon RDS DB snapshot. The KMS key identifier is the key ARN, key ID, alias ARN, or alias name for the KMS key.</p> <ul> <li> <p>If the configuration is for an existing Amazon RDS DB snapshot and you do not specify the <code>kmsKeyId</code>, or you specify an empty string, then the access preview uses the existing <code>kmsKeyId</code> of the snapshot.</p> </li> <li> <p>If the access preview is for a new resource and you do not specify the specify the <code>kmsKeyId</code>, then the access preview considers the snapshot as unencrypted.</p> </li> </ul>"""

attributes instance-attribute

attributes: NotRequired[RdsDbSnapshotAttributesMap]

The names and values of manual DB snapshot attributes. Manual DB snapshot attributes are used to authorize other Amazon Web Services accounts to restore a manual DB snapshot. The only valid value for attributeName for the attribute map is restore.

kms_key_id instance-attribute

kms_key_id: NotRequired[RdsDbSnapshotKmsKeyId]

The KMS key identifier for an encrypted Amazon RDS DB snapshot. The KMS key identifier is the key ARN, key ID, alias ARN, or alias name for the KMS key.

  • If the configuration is for an existing Amazon RDS DB snapshot and you do not specify the kmsKeyId, or you specify an empty string, then the access preview uses the existing kmsKeyId of the snapshot.

  • If the access preview is for a new resource and you do not specify the specify the kmsKeyId, then the access preview considers the snapshot as unencrypted.