Glue / Client / create_security_configuration

create_security_configuration#

Glue.Client.create_security_configuration(**kwargs)#

Creates a new security configuration. A security configuration is a set of security properties that can be used by Glue. You can use a security configuration to encrypt data at rest. For information about using security configurations in Glue, see Encrypting Data Written by Crawlers, Jobs, and Development Endpoints.

See also: AWS API Documentation

Request Syntax

response = client.create_security_configuration(
    Name='string',
    EncryptionConfiguration={
        'S3Encryption': [
            {
                'S3EncryptionMode': 'DISABLED'|'SSE-KMS'|'SSE-S3',
                'KmsKeyArn': 'string'
            },
        ],
        'CloudWatchEncryption': {
            'CloudWatchEncryptionMode': 'DISABLED'|'SSE-KMS',
            'KmsKeyArn': 'string'
        },
        'JobBookmarksEncryption': {
            'JobBookmarksEncryptionMode': 'DISABLED'|'CSE-KMS',
            'KmsKeyArn': 'string'
        },
        'DataQualityEncryption': {
            'DataQualityEncryptionMode': 'DISABLED'|'SSE-KMS',
            'KmsKeyArn': 'string'
        }
    }
)
Parameters:

  • Name (string) –

    [REQUIRED]

    The name for the new security configuration.

  • EncryptionConfiguration (dict) –

    [REQUIRED]

    The encryption configuration for the new security configuration.

    • S3Encryption (list) –

      The encryption configuration for Amazon Simple Storage Service (Amazon S3) data.

      • (dict) –

        Specifies how Amazon Simple Storage Service (Amazon S3) data should be encrypted.

        • S3EncryptionMode (string) –

          The encryption mode to use for Amazon S3 data.

        • KmsKeyArn (string) –

          The Amazon Resource Name (ARN) of the KMS key to be used to encrypt the data.

    • CloudWatchEncryption (dict) –

      The encryption configuration for Amazon CloudWatch.

      • CloudWatchEncryptionMode (string) –

        The encryption mode to use for CloudWatch data.

      • KmsKeyArn (string) –

        The Amazon Resource Name (ARN) of the KMS key to be used to encrypt the data.

    • JobBookmarksEncryption (dict) –

      The encryption configuration for job bookmarks.

      • JobBookmarksEncryptionMode (string) –

        The encryption mode to use for job bookmarks data.

      • KmsKeyArn (string) –

        The Amazon Resource Name (ARN) of the KMS key to be used to encrypt the data.

    • DataQualityEncryption (dict) –

      The encryption configuration for Glue Data Quality assets.

      • DataQualityEncryptionMode (string) –

        The encryption mode to use for encrypting Data Quality assets. These assets include data quality rulesets, results, statistics, anomaly detection models and observations.

        Valid values are SSEKMS for encryption using a customer-managed KMS key, or DISABLED.

      • KmsKeyArn (string) –

        The Amazon Resource Name (ARN) of the KMS key to be used to encrypt the data.

Return type:

dict

Returns:

Response Syntax

{
    'Name': 'string',
    'CreatedTimestamp': datetime(2015, 1, 1)
}

Response Structure

  • (dict) –

    • Name (string) –

      The name assigned to the new security configuration.

    • CreatedTimestamp (datetime) –

      The time at which the new security configuration was created.

Exceptions

  • Glue.Client.exceptions.AlreadyExistsException

  • Glue.Client.exceptions.InvalidInputException

  • Glue.Client.exceptions.InternalServiceException

  • Glue.Client.exceptions.OperationTimeoutException

  • Glue.Client.exceptions.ResourceNumberLimitExceededException