Struct aws_sdk_keyspaces::types::EncryptionSpecification

#[non_exhaustive]
pub struct EncryptionSpecification {
    pub type: EncryptionType,
    pub kms_key_identifier: Option<String>,
}

Amazon Keyspaces encrypts and decrypts the table data at rest transparently and integrates with Key Management Service for storing and managing the encryption key. You can choose one of the following KMS keys (KMS keys):

• Amazon Web Services owned key - This is the default encryption type. The key is owned by Amazon Keyspaces (no additional charge).

• Customer managed key - This key is stored in your account and is created, owned, and managed by you. You have full control over the customer managed key (KMS charges apply).

For more information about encryption at rest in Amazon Keyspaces, see Encryption at rest in the Amazon Keyspaces Developer Guide.

For more information about KMS, see KMS management service concepts in the Key Management Service Developer Guide.

Fields (Non-exhaustive)

Non-exhaustive structs could have additional fields added in future. Therefore, non-exhaustive structs cannot be constructed in external crates using the traditional Struct { .. } syntax; cannot be matched against without a wildcard ..; and struct update syntax will not work.

type: EncryptionType

The encryption option specified for the table. You can choose one of the following KMS keys (KMS keys):

• type:AWS_OWNED_KMS_KEY - This key is owned by Amazon Keyspaces.

• type:CUSTOMER_MANAGED_KMS_KEY - This key is stored in your account and is created, owned, and managed by you. This option requires the kms_key_identifier of the KMS key in Amazon Resource Name (ARN) format as input.

The default is type:AWS_OWNED_KMS_KEY.

For more information, see Encryption at rest in the Amazon Keyspaces Developer Guide.

kms_key_identifier: Option<String>

The Amazon Resource Name (ARN) of the customer managed KMS key, for example kms_key_identifier:ARN.

Implementations

impl EncryptionSpecification

pub fn type(&self) -> &EncryptionType

The encryption option specified for the table. You can choose one of the following KMS keys (KMS keys):

• type:AWS_OWNED_KMS_KEY - This key is owned by Amazon Keyspaces.

• type:CUSTOMER_MANAGED_KMS_KEY - This key is stored in your account and is created, owned, and managed by you. This option requires the kms_key_identifier of the KMS key in Amazon Resource Name (ARN) format as input.

The default is type:AWS_OWNED_KMS_KEY.

For more information, see Encryption at rest in the Amazon Keyspaces Developer Guide.

pub fn kms_key_identifier(&self) -> Option<&str>

The Amazon Resource Name (ARN) of the customer managed KMS key, for example kms_key_identifier:ARN.

impl EncryptionSpecification

pub fn builder() -> EncryptionSpecificationBuilder

Creates a new builder-style object to manufacture EncryptionSpecification.

Trait Implementations

impl Clone for EncryptionSpecification

fn clone(&self) -> EncryptionSpecification

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for EncryptionSpecification

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl PartialEq for EncryptionSpecification

fn eq(&self, other: &EncryptionSpecification) -> bool

This method tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

This method tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for EncryptionSpecification