com.pulumi.azurenative.awsconnector.outputs.ServerSideEncryptionByDefaultResponse Maven / Gradle / Ivy
Go to download
Show more of this group Show more artifacts with this name
Show all versions of azure-native Show documentation
Show all versions of azure-native Show documentation
A native Pulumi package for creating and managing Azure resources.
// *** WARNING: this file was generated by pulumi-java-gen. ***
// *** Do not edit by hand unless you're certain you know what you are doing! ***
package com.pulumi.azurenative.awsconnector.outputs;
import com.pulumi.core.annotations.CustomType;
import java.lang.String;
import java.util.Objects;
import java.util.Optional;
import javax.annotation.Nullable;
@CustomType
public final class ServerSideEncryptionByDefaultResponse {
/**
* @return AWS Key Management Service (KMS) customer AWS KMS key ID to use for the default encryption. This parameter is allowed if and only if ``SSEAlgorithm`` is set to ``aws:kms`` or ``aws:kms:dsse``. You can specify the key ID, key alias, or the Amazon Resource Name (ARN) of the KMS key. + Key ID: ``1234abcd-12ab-34cd-56ef-1234567890ab`` + Key ARN: ``arn:aws:kms:us-east-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab`` + Key Alias: ``alias/alias-name`` If you use a key ID, you can run into a LogDestination undeliverable error when creating a VPC flow log. If you are using encryption with cross-account or AWS service operations you must use a fully qualified KMS key ARN. For more information, see [Using encryption for cross-account operations](https://docs.aws.amazon.com/AmazonS3/latest/dev/bucket-encryption.html#bucket-encryption-update-bucket-policy). Amazon S3 only supports symmetric encryption KMS keys. For more information, see [Asymmetric keys in KMS](https://docs.aws.amazon.com//kms/latest/developerguide/symmetric-asymmetric.html) in the *Key Management Service Developer Guide*.
*
*/
private @Nullable String kmsMasterKeyID;
/**
* @return Server-side encryption algorithm to use for the default encryption.
*
*/
private @Nullable String sseAlgorithm;
private ServerSideEncryptionByDefaultResponse() {}
/**
* @return AWS Key Management Service (KMS) customer AWS KMS key ID to use for the default encryption. This parameter is allowed if and only if ``SSEAlgorithm`` is set to ``aws:kms`` or ``aws:kms:dsse``. You can specify the key ID, key alias, or the Amazon Resource Name (ARN) of the KMS key. + Key ID: ``1234abcd-12ab-34cd-56ef-1234567890ab`` + Key ARN: ``arn:aws:kms:us-east-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab`` + Key Alias: ``alias/alias-name`` If you use a key ID, you can run into a LogDestination undeliverable error when creating a VPC flow log. If you are using encryption with cross-account or AWS service operations you must use a fully qualified KMS key ARN. For more information, see [Using encryption for cross-account operations](https://docs.aws.amazon.com/AmazonS3/latest/dev/bucket-encryption.html#bucket-encryption-update-bucket-policy). Amazon S3 only supports symmetric encryption KMS keys. For more information, see [Asymmetric keys in KMS](https://docs.aws.amazon.com//kms/latest/developerguide/symmetric-asymmetric.html) in the *Key Management Service Developer Guide*.
*
*/
public Optional kmsMasterKeyID() {
return Optional.ofNullable(this.kmsMasterKeyID);
}
/**
* @return Server-side encryption algorithm to use for the default encryption.
*
*/
public Optional sseAlgorithm() {
return Optional.ofNullable(this.sseAlgorithm);
}
public static Builder builder() {
return new Builder();
}
public static Builder builder(ServerSideEncryptionByDefaultResponse defaults) {
return new Builder(defaults);
}
@CustomType.Builder
public static final class Builder {
private @Nullable String kmsMasterKeyID;
private @Nullable String sseAlgorithm;
public Builder() {}
public Builder(ServerSideEncryptionByDefaultResponse defaults) {
Objects.requireNonNull(defaults);
this.kmsMasterKeyID = defaults.kmsMasterKeyID;
this.sseAlgorithm = defaults.sseAlgorithm;
}
@CustomType.Setter
public Builder kmsMasterKeyID(@Nullable String kmsMasterKeyID) {
this.kmsMasterKeyID = kmsMasterKeyID;
return this;
}
@CustomType.Setter
public Builder sseAlgorithm(@Nullable String sseAlgorithm) {
this.sseAlgorithm = sseAlgorithm;
return this;
}
public ServerSideEncryptionByDefaultResponse build() {
final var _resultValue = new ServerSideEncryptionByDefaultResponse();
_resultValue.kmsMasterKeyID = kmsMasterKeyID;
_resultValue.sseAlgorithm = sseAlgorithm;
return _resultValue;
}
}
}
© 2015 - 2024 Weber Informatics LLC | Privacy Policy