AWS glue medium security documentation change
Summary
Added DataQualityEncryption structure with SSE-KMS encryption configuration for Data Quality assets
Security assessment
Explicitly introduces encryption controls (SSE-KMS/DISABLED) for sensitive Data Quality assets including rulesets and anomaly detection models. This represents a new security feature addition.
Diff
diff --git a/glue/latest/dg/aws-glue-api-jobs-security.md b/glue/latest/dg/aws-glue-api-jobs-security.md index 3885100ac..88b9b3d14 100644 --- a/glue/latest/dg/aws-glue-api-jobs-security.md +++ b/glue/latest/dg/aws-glue-api-jobs-security.md @@ -5 +5 @@ -— data types —DataCatalogEncryptionSettingsEncryptionAtRestConnectionPasswordEncryptionEncryptionConfigurationS3EncryptionCloudWatchEncryptionJobBookmarksEncryptionSecurityConfigurationGluePolicy — operations —GetDataCatalogEncryptionSettings (get_data_catalog_encryption_settings)PutDataCatalogEncryptionSettings (put_data_catalog_encryption_settings)PutResourcePolicy (put_resource_policy)GetResourcePolicy (get_resource_policy)DeleteResourcePolicy (delete_resource_policy)CreateSecurityConfiguration (create_security_configuration)DeleteSecurityConfiguration (delete_security_configuration)GetSecurityConfiguration (get_security_configuration)GetSecurityConfigurations (get_security_configurations)GetResourcePolicies (get_resource_policies) +— data types —DataCatalogEncryptionSettingsEncryptionAtRestConnectionPasswordEncryptionEncryptionConfigurationS3EncryptionCloudWatchEncryptionJobBookmarksEncryptionSecurityConfigurationGluePolicyDataQualityEncryption — operations —GetDataCatalogEncryptionSettings (get_data_catalog_encryption_settings)PutDataCatalogEncryptionSettings (put_data_catalog_encryption_settings)PutResourcePolicy (put_resource_policy)GetResourcePolicy (get_resource_policy)DeleteResourcePolicy (delete_resource_policy)CreateSecurityConfiguration (create_security_configuration)DeleteSecurityConfiguration (delete_security_configuration)GetSecurityConfiguration (get_security_configuration)GetSecurityConfigurations (get_security_configurations)GetResourcePolicies (get_resource_policies) @@ -30,0 +31,2 @@ The Security API describes the security data types, and the API related to secur + * DataQualityEncryption structure + @@ -114,0 +117,4 @@ The encryption configuration for job bookmarks. + * `DataQualityEncryption` – A DataQualityEncryption object. + +The encryption configuration for AWS Glue Data Quality assets. + @@ -214,0 +221,19 @@ The date and time at which the policy was last updated. +## DataQualityEncryption structure + +Specifies how Data Quality assets in your account should be encrypted. + +###### Fields + + * `DataQualityEncryptionMode` – UTF-8 string (valid values: `DISABLED` | `SSE-KMS="SSEKMS"`). + +The encryption mode to use for encrypting Data Quality assets. These assets include data quality rulesets, results, statistics, anomaly detection models and observations. + +Valid values are `SSEKMS` for encryption using a customer-managed KMS key, or `DISABLED`. + + * `KmsKeyArn` – UTF-8 string, matching the [Custom string pattern #29](./aws-glue-api-common.html#regex_29). + +The Amazon Resource Name (ARN) of the KMS key to be used to encrypt the data. + + + +