pub struct Builder { /* private fields */ }Expand description
A builder for OnlineStoreSecurityConfig.
Implementations
sourceimpl Builder
impl Builder
sourcepub fn kms_key_id(self, input: impl Into<String>) -> Self
pub fn kms_key_id(self, input: impl Into<String>) -> Self
The ID of the Amazon Web Services Key Management Service (Amazon Web Services KMS) key that SageMaker Feature Store uses to encrypt the Amazon S3 objects at rest using Amazon S3 server-side encryption.
The caller (either IAM user or IAM role) of CreateFeatureGroup must have below permissions to the OnlineStore KmsKeyId:
-
"kms:Encrypt" -
"kms:Decrypt" -
"kms:DescribeKey" -
"kms:CreateGrant" -
"kms:RetireGrant" -
"kms:ReEncryptFrom" -
"kms:ReEncryptTo" -
"kms:GenerateDataKey" -
"kms:ListAliases" -
"kms:ListGrants" -
"kms:RevokeGrant"
The caller (either IAM user or IAM role) to all DataPlane operations (PutRecord, GetRecord, DeleteRecord) must have the following permissions to the KmsKeyId:
-
"kms:Decrypt"
sourcepub fn set_kms_key_id(self, input: Option<String>) -> Self
pub fn set_kms_key_id(self, input: Option<String>) -> Self
The ID of the Amazon Web Services Key Management Service (Amazon Web Services KMS) key that SageMaker Feature Store uses to encrypt the Amazon S3 objects at rest using Amazon S3 server-side encryption.
The caller (either IAM user or IAM role) of CreateFeatureGroup must have below permissions to the OnlineStore KmsKeyId:
-
"kms:Encrypt" -
"kms:Decrypt" -
"kms:DescribeKey" -
"kms:CreateGrant" -
"kms:RetireGrant" -
"kms:ReEncryptFrom" -
"kms:ReEncryptTo" -
"kms:GenerateDataKey" -
"kms:ListAliases" -
"kms:ListGrants" -
"kms:RevokeGrant"
The caller (either IAM user or IAM role) to all DataPlane operations (PutRecord, GetRecord, DeleteRecord) must have the following permissions to the KmsKeyId:
-
"kms:Decrypt"
sourcepub fn build(self) -> OnlineStoreSecurityConfig
pub fn build(self) -> OnlineStoreSecurityConfig
Consumes the builder and constructs a OnlineStoreSecurityConfig.