#[non_exhaustive]pub struct DeliveryStreamEncryptionConfigurationInput {
pub key_arn: Option<String>,
pub key_type: Option<KeyType>,
}
Expand description
Specifies the type and Amazon Resource Name (ARN) of the CMK to use for Server-Side Encryption (SSE).
Fields (Non-exhaustive)
This struct is marked as non-exhaustive
Struct { .. }
syntax; cannot be matched against without a wildcard ..
; and struct update syntax will not work.key_arn: Option<String>
If you set KeyType
to CUSTOMER_MANAGED_CMK
, you must specify the Amazon Resource Name (ARN) of the CMK. If you set KeyType
to AWS_OWNED_CMK
, Kinesis Data Firehose uses a service-account CMK.
key_type: Option<KeyType>
Indicates the type of customer master key (CMK) to use for encryption. The default setting is AWS_OWNED_CMK
. For more information about CMKs, see Customer Master Keys (CMKs). When you invoke CreateDeliveryStream
or StartDeliveryStreamEncryption
with KeyType
set to CUSTOMER_MANAGED_CMK, Kinesis Data Firehose invokes the Amazon KMS operation CreateGrant to create a grant that allows the Kinesis Data Firehose service to use the customer managed CMK to perform encryption and decryption. Kinesis Data Firehose manages that grant.
When you invoke StartDeliveryStreamEncryption
to change the CMK for a delivery stream that is encrypted with a customer managed CMK, Kinesis Data Firehose schedules the grant it had on the old CMK for retirement.
You can use a CMK of type CUSTOMER_MANAGED_CMK to encrypt up to 500 delivery streams. If a CreateDeliveryStream
or StartDeliveryStreamEncryption
operation exceeds this limit, Kinesis Data Firehose throws a LimitExceededException
.
To encrypt your delivery stream, use symmetric CMKs. Kinesis Data Firehose doesn't support asymmetric CMKs. For information about symmetric and asymmetric CMKs, see About Symmetric and Asymmetric CMKs in the AWS Key Management Service developer guide.
Implementations
sourceimpl DeliveryStreamEncryptionConfigurationInput
impl DeliveryStreamEncryptionConfigurationInput
sourcepub fn key_arn(&self) -> Option<&str>
pub fn key_arn(&self) -> Option<&str>
If you set KeyType
to CUSTOMER_MANAGED_CMK
, you must specify the Amazon Resource Name (ARN) of the CMK. If you set KeyType
to AWS_OWNED_CMK
, Kinesis Data Firehose uses a service-account CMK.
sourcepub fn key_type(&self) -> Option<&KeyType>
pub fn key_type(&self) -> Option<&KeyType>
Indicates the type of customer master key (CMK) to use for encryption. The default setting is AWS_OWNED_CMK
. For more information about CMKs, see Customer Master Keys (CMKs). When you invoke CreateDeliveryStream
or StartDeliveryStreamEncryption
with KeyType
set to CUSTOMER_MANAGED_CMK, Kinesis Data Firehose invokes the Amazon KMS operation CreateGrant to create a grant that allows the Kinesis Data Firehose service to use the customer managed CMK to perform encryption and decryption. Kinesis Data Firehose manages that grant.
When you invoke StartDeliveryStreamEncryption
to change the CMK for a delivery stream that is encrypted with a customer managed CMK, Kinesis Data Firehose schedules the grant it had on the old CMK for retirement.
You can use a CMK of type CUSTOMER_MANAGED_CMK to encrypt up to 500 delivery streams. If a CreateDeliveryStream
or StartDeliveryStreamEncryption
operation exceeds this limit, Kinesis Data Firehose throws a LimitExceededException
.
To encrypt your delivery stream, use symmetric CMKs. Kinesis Data Firehose doesn't support asymmetric CMKs. For information about symmetric and asymmetric CMKs, see About Symmetric and Asymmetric CMKs in the AWS Key Management Service developer guide.
sourceimpl DeliveryStreamEncryptionConfigurationInput
impl DeliveryStreamEncryptionConfigurationInput
sourcepub fn builder() -> Builder
pub fn builder() -> Builder
Creates a new builder-style object to manufacture DeliveryStreamEncryptionConfigurationInput
Trait Implementations
sourceimpl Clone for DeliveryStreamEncryptionConfigurationInput
impl Clone for DeliveryStreamEncryptionConfigurationInput
sourcefn clone(&self) -> DeliveryStreamEncryptionConfigurationInput
fn clone(&self) -> DeliveryStreamEncryptionConfigurationInput
Returns a copy of the value. Read more
1.0.0 · sourcefn clone_from(&mut self, source: &Self)
fn clone_from(&mut self, source: &Self)
Performs copy-assignment from source
. Read more
sourceimpl PartialEq<DeliveryStreamEncryptionConfigurationInput> for DeliveryStreamEncryptionConfigurationInput
impl PartialEq<DeliveryStreamEncryptionConfigurationInput> for DeliveryStreamEncryptionConfigurationInput
sourcefn eq(&self, other: &DeliveryStreamEncryptionConfigurationInput) -> bool
fn eq(&self, other: &DeliveryStreamEncryptionConfigurationInput) -> bool
This method tests for self
and other
values to be equal, and is used
by ==
. Read more
sourcefn ne(&self, other: &DeliveryStreamEncryptionConfigurationInput) -> bool
fn ne(&self, other: &DeliveryStreamEncryptionConfigurationInput) -> bool
This method tests for !=
.
impl StructuralPartialEq for DeliveryStreamEncryptionConfigurationInput
Auto Trait Implementations
impl RefUnwindSafe for DeliveryStreamEncryptionConfigurationInput
impl Send for DeliveryStreamEncryptionConfigurationInput
impl Sync for DeliveryStreamEncryptionConfigurationInput
impl Unpin for DeliveryStreamEncryptionConfigurationInput
impl UnwindSafe for DeliveryStreamEncryptionConfigurationInput
Blanket Implementations
sourceimpl<T> BorrowMut<T> for T where
T: ?Sized,
impl<T> BorrowMut<T> for T where
T: ?Sized,
const: unstable · sourcefn borrow_mut(&mut self) -> &mut T
fn borrow_mut(&mut self) -> &mut T
Mutably borrows from an owned value. Read more
sourceimpl<T> Instrument for T
impl<T> Instrument for T
sourcefn instrument(self, span: Span) -> Instrumented<Self>
fn instrument(self, span: Span) -> Instrumented<Self>
sourcefn in_current_span(self) -> Instrumented<Self>
fn in_current_span(self) -> Instrumented<Self>
sourceimpl<T> ToOwned for T where
T: Clone,
impl<T> ToOwned for T where
T: Clone,
type Owned = T
type Owned = T
The resulting type after obtaining ownership.
sourcefn clone_into(&self, target: &mut T)
fn clone_into(&self, target: &mut T)
toowned_clone_into
)Uses borrowed data to replace owned data, usually by cloning. Read more
sourceimpl<T> WithSubscriber for T
impl<T> WithSubscriber for T
sourcefn with_subscriber<S>(self, subscriber: S) -> WithDispatch<Self> where
S: Into<Dispatch>,
fn with_subscriber<S>(self, subscriber: S) -> WithDispatch<Self> where
S: Into<Dispatch>,
Attaches the provided Subscriber
to this type, returning a
WithDispatch
wrapper. Read more
sourcefn with_current_subscriber(self) -> WithDispatch<Self>
fn with_current_subscriber(self) -> WithDispatch<Self>
Attaches the current default Subscriber
to this type, returning a
WithDispatch
wrapper. Read more