Skip to content

KmsEncryptionSettings

Source code in docs_src/capo_verifiedpermissions/types/kms_encryption_settings.py
class KmsEncryptionSettings(TypedDict, closed=True):
    key: "capo_verifiedpermissions.types.kms_key.KmsKey"
    """<p>The customer-managed KMS key <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource Name (ARN)</a>, alias or ID to be used for encryption processes. </p> <p>Users can provide the full KMS key ARN, a KMS key alias, or a KMS key ID, but it will be mapped to the full KMS key ARN after policy store creation, and referenced when encrypting child resources. </p>"""
    encryption_context: NotRequired[
        "capo_verifiedpermissions.types.encryption_context.EncryptionContext"
    ]
    """<p>User-defined, additional context to be added to encryption processes. </p>"""

encryption_context instance-attribute

encryption_context: NotRequired[EncryptionContext]

User-defined, additional context to be added to encryption processes.

key instance-attribute

key: KmsKey

The customer-managed KMS key Amazon Resource Name (ARN), alias or ID to be used for encryption processes.

Users can provide the full KMS key ARN, a KMS key alias, or a KMS key ID, but it will be mapped to the full KMS key ARN after policy store creation, and referenced when encrypting child resources.