Struct aws_sdk_mediaconvert::types::S3EncryptionSettings
source · #[non_exhaustive]pub struct S3EncryptionSettings {
pub encryption_type: Option<S3ServerSideEncryptionType>,
pub kms_encryption_context: Option<String>,
pub kms_key_arn: Option<String>,
}
Expand description
Settings for how your job outputs are encrypted as they are uploaded to Amazon S3.
Fields (Non-exhaustive)§
This struct is marked as non-exhaustive
Struct { .. }
syntax; cannot be matched against without a wildcard ..
; and struct update syntax will not work.encryption_type: Option<S3ServerSideEncryptionType>
Specify how you want your data keys managed. AWS uses data keys to encrypt your content. AWS also encrypts the data keys themselves, using a customer master key (CMK), and then stores the encrypted data keys alongside your encrypted content. Use this setting to specify which AWS service manages the CMK. For simplest set up, choose Amazon S3. If you want your master key to be managed by AWS Key Management Service (KMS), choose AWS KMS. By default, when you choose AWS KMS, KMS uses the AWS managed customer master key (CMK) associated with Amazon S3 to encrypt your data keys. You can optionally choose to specify a different, customer managed CMK. Do so by specifying the Amazon Resource Name (ARN) of the key for the setting KMS ARN.
kms_encryption_context: Option<String>
Optionally, specify the encryption context that you want to use alongside your KMS key. AWS KMS uses this encryption context as additional authenticated data (AAD) to support authenticated encryption. This value must be a base64-encoded UTF-8 string holding JSON which represents a string-string map. To use this setting, you must also set Server-side encryption to AWS KMS. For more information about encryption context, see: https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#encrypt_context.
kms_key_arn: Option<String>
Optionally, specify the customer master key (CMK) that you want to use to encrypt the data key that AWS uses to encrypt your output content. Enter the Amazon Resource Name (ARN) of the CMK. To use this setting, you must also set Server-side encryption to AWS KMS. If you set Server-side encryption to AWS KMS but don’t specify a CMK here, AWS uses the AWS managed CMK associated with Amazon S3.
Implementations§
source§impl S3EncryptionSettings
impl S3EncryptionSettings
sourcepub fn encryption_type(&self) -> Option<&S3ServerSideEncryptionType>
pub fn encryption_type(&self) -> Option<&S3ServerSideEncryptionType>
Specify how you want your data keys managed. AWS uses data keys to encrypt your content. AWS also encrypts the data keys themselves, using a customer master key (CMK), and then stores the encrypted data keys alongside your encrypted content. Use this setting to specify which AWS service manages the CMK. For simplest set up, choose Amazon S3. If you want your master key to be managed by AWS Key Management Service (KMS), choose AWS KMS. By default, when you choose AWS KMS, KMS uses the AWS managed customer master key (CMK) associated with Amazon S3 to encrypt your data keys. You can optionally choose to specify a different, customer managed CMK. Do so by specifying the Amazon Resource Name (ARN) of the key for the setting KMS ARN.
sourcepub fn kms_encryption_context(&self) -> Option<&str>
pub fn kms_encryption_context(&self) -> Option<&str>
Optionally, specify the encryption context that you want to use alongside your KMS key. AWS KMS uses this encryption context as additional authenticated data (AAD) to support authenticated encryption. This value must be a base64-encoded UTF-8 string holding JSON which represents a string-string map. To use this setting, you must also set Server-side encryption to AWS KMS. For more information about encryption context, see: https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#encrypt_context.
sourcepub fn kms_key_arn(&self) -> Option<&str>
pub fn kms_key_arn(&self) -> Option<&str>
Optionally, specify the customer master key (CMK) that you want to use to encrypt the data key that AWS uses to encrypt your output content. Enter the Amazon Resource Name (ARN) of the CMK. To use this setting, you must also set Server-side encryption to AWS KMS. If you set Server-side encryption to AWS KMS but don’t specify a CMK here, AWS uses the AWS managed CMK associated with Amazon S3.
source§impl S3EncryptionSettings
impl S3EncryptionSettings
sourcepub fn builder() -> S3EncryptionSettingsBuilder
pub fn builder() -> S3EncryptionSettingsBuilder
Creates a new builder-style object to manufacture S3EncryptionSettings
.
Trait Implementations§
source§impl Clone for S3EncryptionSettings
impl Clone for S3EncryptionSettings
source§fn clone(&self) -> S3EncryptionSettings
fn clone(&self) -> S3EncryptionSettings
1.0.0 · source§fn clone_from(&mut self, source: &Self)
fn clone_from(&mut self, source: &Self)
source
. Read moresource§impl Debug for S3EncryptionSettings
impl Debug for S3EncryptionSettings
source§impl PartialEq for S3EncryptionSettings
impl PartialEq for S3EncryptionSettings
source§fn eq(&self, other: &S3EncryptionSettings) -> bool
fn eq(&self, other: &S3EncryptionSettings) -> bool
self
and other
values to be equal, and is used
by ==
.impl StructuralPartialEq for S3EncryptionSettings
Auto Trait Implementations§
impl Freeze for S3EncryptionSettings
impl RefUnwindSafe for S3EncryptionSettings
impl Send for S3EncryptionSettings
impl Sync for S3EncryptionSettings
impl Unpin for S3EncryptionSettings
impl UnwindSafe for S3EncryptionSettings
Blanket Implementations§
source§impl<T> BorrowMut<T> for Twhere
T: ?Sized,
impl<T> BorrowMut<T> for Twhere
T: ?Sized,
source§fn borrow_mut(&mut self) -> &mut T
fn borrow_mut(&mut self) -> &mut T
source§impl<T> Instrument for T
impl<T> Instrument for T
source§fn instrument(self, span: Span) -> Instrumented<Self>
fn instrument(self, span: Span) -> Instrumented<Self>
source§fn in_current_span(self) -> Instrumented<Self>
fn in_current_span(self) -> Instrumented<Self>
source§impl<T> IntoEither for T
impl<T> IntoEither for T
source§fn into_either(self, into_left: bool) -> Either<Self, Self>
fn into_either(self, into_left: bool) -> Either<Self, Self>
self
into a Left
variant of Either<Self, Self>
if into_left
is true
.
Converts self
into a Right
variant of Either<Self, Self>
otherwise. Read moresource§fn into_either_with<F>(self, into_left: F) -> Either<Self, Self>
fn into_either_with<F>(self, into_left: F) -> Either<Self, Self>
self
into a Left
variant of Either<Self, Self>
if into_left(&self)
returns true
.
Converts self
into a Right
variant of Either<Self, Self>
otherwise. Read more