Package com.pulumi.aws.xray
Class EncryptionConfig
- java.lang.Object
-
- com.pulumi.resources.Resource
-
- com.pulumi.resources.CustomResource
-
- com.pulumi.aws.xray.EncryptionConfig
-
public class EncryptionConfig extends com.pulumi.resources.CustomResourceCreates and manages an AWS XRay Encryption Config. > **NOTE:** Removing this resource from the provider has no effect to the encryption configuration within X-Ray. ## Example Usage
### Example Usage with KMS Keypackage generated_program; import com.pulumi.Context; import com.pulumi.Pulumi; import com.pulumi.core.Output; import com.pulumi.aws.xray.EncryptionConfig; import com.pulumi.aws.xray.EncryptionConfigArgs; import java.util.ArrayList; import java.util.Arrays; import java.util.Map; import java.io.File; import java.nio.file.Files; import java.nio.file.Paths; public class App { public static void main(String[] args) { Pulumi.run(App::stack); } public static void stack(Context ctx) { var example = new EncryptionConfig("example", EncryptionConfigArgs.builder() .type("NONE") .build()); } }
## Import ### Identity Schema #### Optional * `accountId` (String) Account ID where this resource is managed. * `region` (String) Region where this resource is managed. Using `pulumi import`, import XRay Encryption Config using the region name. For example: ```sh $ pulumi import aws:xray/encryptionConfig:EncryptionConfig example us-west-2 ```package generated_program; import com.pulumi.Context; import com.pulumi.Pulumi; import com.pulumi.core.Output; import com.pulumi.aws.AwsFunctions; import com.pulumi.aws.inputs.GetCallerIdentityArgs; import com.pulumi.aws.iam.IamFunctions; import com.pulumi.aws.iam.inputs.GetPolicyDocumentArgs; import com.pulumi.aws.iam.inputs.GetPolicyDocumentStatementArgs; import com.pulumi.aws.iam.inputs.GetPolicyDocumentStatementPrincipalArgs; import com.pulumi.aws.kms.Key; import com.pulumi.aws.kms.KeyArgs; import com.pulumi.aws.xray.EncryptionConfig; import com.pulumi.aws.xray.EncryptionConfigArgs; import java.util.ArrayList; import java.util.Arrays; import java.util.Map; import java.io.File; import java.nio.file.Files; import java.nio.file.Paths; public class App { public static void main(String[] args) { Pulumi.run(App::stack); } public static void stack(Context ctx) { final var current = AwsFunctions.getCallerIdentity(GetCallerIdentityArgs.builder() .build()); final var example = IamFunctions.getPolicyDocument(GetPolicyDocumentArgs.builder() .statements(GetPolicyDocumentStatementArgs.builder() .principals(GetPolicyDocumentStatementPrincipalArgs.builder() .type("AWS") .identifiers(String.format("arn:aws:iam::%s:root", current.accountId())) .build()) .sid("Enable IAM User Permissions") .effect("Allow") .actions("kms:*") .resources("*") .build()) .build()); var exampleKey = new Key("exampleKey", KeyArgs.builder() .description("Some Key") .deletionWindowInDays(7) .policy(example.json()) .build()); var exampleEncryptionConfig = new EncryptionConfig("exampleEncryptionConfig", EncryptionConfigArgs.builder() .type("KMS") .keyId(exampleKey.arn()) .build()); } }
-
-
Constructor Summary
Constructors Constructor Description EncryptionConfig(java.lang.String name)EncryptionConfig(java.lang.String name, EncryptionConfigArgs args)EncryptionConfig(java.lang.String name, EncryptionConfigArgs args, com.pulumi.resources.CustomResourceOptions options)
-
Method Summary
All Methods Static Methods Instance Methods Concrete Methods Modifier and Type Method Description static EncryptionConfigget(java.lang.String name, com.pulumi.core.Output<java.lang.String> id, EncryptionConfigState state, com.pulumi.resources.CustomResourceOptions options)Get an existing Host resource's state with the given name, ID, and optional extra properties used to qualify the lookup.com.pulumi.core.Output<java.util.Optional<java.lang.String>>keyId()com.pulumi.core.Output<java.lang.String>region()com.pulumi.core.Output<java.lang.String>type()
-
-
-
Constructor Detail
-
EncryptionConfig
public EncryptionConfig(java.lang.String name)
- Parameters:
name- The _unique_ name of the resulting resource.
-
EncryptionConfig
public EncryptionConfig(java.lang.String name, EncryptionConfigArgs args)- Parameters:
name- The _unique_ name of the resulting resource.args- The arguments to use to populate this resource's properties.
-
EncryptionConfig
public EncryptionConfig(java.lang.String name, EncryptionConfigArgs args, @Nullable com.pulumi.resources.CustomResourceOptions options)- Parameters:
name- The _unique_ name of the resulting resource.args- The arguments to use to populate this resource's properties.options- A bag of options that control this resource's behavior.
-
-
Method Detail
-
keyId
public com.pulumi.core.Output<java.util.Optional<java.lang.String>> keyId()
- Returns:
- AWS KMS customer master key (CMK) ARN.
-
region
public com.pulumi.core.Output<java.lang.String> region()
- Returns:
- Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
-
type
public com.pulumi.core.Output<java.lang.String> type()
- Returns:
- Type of encryption. Set to `KMS` to use your own key for encryption. Set to `NONE` for default encryption.
-
get
public static EncryptionConfig get(java.lang.String name, com.pulumi.core.Output<java.lang.String> id, @Nullable EncryptionConfigState state, @Nullable com.pulumi.resources.CustomResourceOptions options)
Get an existing Host resource's state with the given name, ID, and optional extra properties used to qualify the lookup.- Parameters:
name- The _unique_ name of the resulting resource.id- The _unique_ provider ID of the resource to lookup.state-options- Optional settings to control the behavior of the CustomResource.
-
-