Package com.pulumi.aws.dynamodb.outputs
Class TableServerSideEncryption
- java.lang.Object
-
- com.pulumi.aws.dynamodb.outputs.TableServerSideEncryption
-
public final class TableServerSideEncryption extends java.lang.Object
-
-
Nested Class Summary
Nested Classes Modifier and Type Class Description static classTableServerSideEncryption.Builder
-
Method Summary
All Methods Static Methods Instance Methods Concrete Methods Modifier and Type Method Description static TableServerSideEncryption.Builderbuilder()static TableServerSideEncryption.Builderbuilder(TableServerSideEncryption defaults)java.lang.Booleanenabled()java.util.Optional<java.lang.String>kmsKeyArn()
-
-
-
Method Detail
-
enabled
public java.lang.Boolean enabled()
- Returns:
- Whether or not to enable encryption at rest using an AWS managed KMS customer master key (CMK). If `enabled` is `false` then server-side encryption is set to AWS-_owned_ key (shown as `DEFAULT` in the AWS console). Potentially confusingly, if `enabled` is `true` and no `kmsKeyArn` is specified then server-side encryption is set to the _default_ KMS-_managed_ key (shown as `KMS` in the AWS console). The [AWS KMS documentation](https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html) explains the difference between AWS-_owned_ and KMS-_managed_ keys.
-
kmsKeyArn
public java.util.Optional<java.lang.String> kmsKeyArn()
- Returns:
- ARN of the CMK that should be used for the AWS KMS encryption. This argument should only be used if the key is different from the default KMS-managed DynamoDB key, `alias/aws/dynamodb`. **Note:** This attribute will _not_ be populated with the ARN of _default_ keys.
-
builder
public static TableServerSideEncryption.Builder builder()
-
builder
public static TableServerSideEncryption.Builder builder(TableServerSideEncryption defaults)
-
-