[−][src]Struct rusoto_glue::ConnectionPasswordEncryption
The data structure used by the Data Catalog to encrypt the password as part of CreateConnection
or UpdateConnection
and store it in the ENCRYPTED_PASSWORD
field in the connection properties. You can enable catalog encryption or only password encryption.
When a CreationConnection
request arrives containing a password, the Data Catalog first encrypts the password using your KMS key, and then encrypts the whole connection object again if catalog encryption is also enabled.
This encryption requires that you set KMS key permissions to enable or restrict access on the password key according to your security requirements. For example, you may want only admin users to have decrypt permission on the password key.
Fields
aws_kms_key_id: Option<String>
A KMS key used to protect access to the JDBC source.
All users in your account should be granted the kms:encrypt
permission to encrypt passwords before storing them in the Data Catalog (through the AWS Glue CreateConnection
operation).
The decrypt permission should be granted only to KMS key admins and IAM roles designated for AWS Glue crawlers.
return_connection_password_encrypted: bool
When the ReturnConnectionPasswordEncrypted
flag is set to "true", passwords remain encrypted in the responses of GetConnection
and GetConnections
. This encryption takes effect independently from catalog encryption.
Trait Implementations
impl PartialEq<ConnectionPasswordEncryption> for ConnectionPasswordEncryption
[src]
fn eq(&self, other: &ConnectionPasswordEncryption) -> bool
[src]
fn ne(&self, other: &ConnectionPasswordEncryption) -> bool
[src]
impl Default for ConnectionPasswordEncryption
[src]
impl Clone for ConnectionPasswordEncryption
[src]
fn clone(&self) -> ConnectionPasswordEncryption
[src]
fn clone_from(&mut self, source: &Self)
1.0.0[src]
Performs copy-assignment from source
. Read more
impl Debug for ConnectionPasswordEncryption
[src]
impl Serialize for ConnectionPasswordEncryption
[src]
fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error> where
__S: Serializer,
[src]
__S: Serializer,
impl<'de> Deserialize<'de> for ConnectionPasswordEncryption
[src]
fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error> where
__D: Deserializer<'de>,
[src]
__D: Deserializer<'de>,
Auto Trait Implementations
impl Send for ConnectionPasswordEncryption
impl Sync for ConnectionPasswordEncryption
Blanket Implementations
impl<T, U> Into for T where
U: From<T>,
[src]
U: From<T>,
impl<T> ToOwned for T where
T: Clone,
[src]
T: Clone,
impl<T> From for T
[src]
impl<T, U> TryFrom for T where
U: Into<T>,
[src]
U: Into<T>,
type Error = Infallible
The type returned in the event of a conversion error.
fn try_from(value: U) -> Result<T, <T as TryFrom<U>>::Error>
[src]
impl<T> Borrow for T where
T: ?Sized,
[src]
T: ?Sized,
impl<T> BorrowMut for T where
T: ?Sized,
[src]
T: ?Sized,
fn borrow_mut(&mut self) -> &mut T
[src]
impl<T, U> TryInto for T where
U: TryFrom<T>,
[src]
U: TryFrom<T>,
type Error = <U as TryFrom<T>>::Error
The type returned in the event of a conversion error.
fn try_into(self) -> Result<U, <U as TryFrom<T>>::Error>
[src]
impl<T> Any for T where
T: 'static + ?Sized,
[src]
T: 'static + ?Sized,
impl<T> DeserializeOwned for T where
T: Deserialize<'de>,
[src]
T: Deserialize<'de>,
impl<T> Erased for T
impl<T> Same for T
type Output = T
Should always be Self