Skip to content

ConnectionPasswordEncryption

Source code in docs_src/capo_glue/types/connection_password_encryption.py 
12
13
14
15
16
class ConnectionPasswordEncryption(TypedDict, closed=True):
    return_connection_password_encrypted: "capo_glue.types.boolean.Boolean"
    """<p>When the <code>ReturnConnectionPasswordEncrypted</code> flag is set to "true", passwords remain encrypted in the responses of <code>GetConnection</code> and <code>GetConnections</code>. This encryption takes effect independently from catalog encryption. </p>"""
    aws_kms_key_id: NotRequired["capo_glue.types.name_string.NameString"]
    """<p>An KMS key that is used to encrypt the connection password. </p> <p>If connection password protection is enabled, the caller of <code>CreateConnection</code> and <code>UpdateConnection</code> needs at least <code>kms:Encrypt</code> permission on the specified KMS key, to encrypt passwords before storing them in the Data Catalog. </p> <p>You can set the decrypt permission to enable or restrict access on the password key according to your security requirements.</p>"""

aws_kms_key_id instance-attribute 

aws_kms_key_id: NotRequired[NameString]

An KMS key that is used to encrypt the connection password.

If connection password protection is enabled, the caller of CreateConnection and UpdateConnection needs at least kms:Encrypt permission on the specified KMS key, to encrypt passwords before storing them in the Data Catalog.

You can set the decrypt permission to enable or restrict access on the password key according to your security requirements.

return_connection_password_encrypted instance-attribute 

return_connection_password_encrypted: Boolean

When the ReturnConnectionPasswordEncrypted flag is set to "true", passwords remain encrypted in the responses of GetConnection and GetConnections. This encryption takes effect independently from catalog encryption.