com.pulumi.awsnative.sagemaker.kotlin.outputs.FeatureGroupOnlineStoreSecurityConfig.kt Maven / Gradle / Ivy

Go to download
@file:Suppress("NAME_SHADOWING", "DEPRECATION")

package com.pulumi.awsnative.sagemaker.kotlin.outputs

import kotlin.String
import kotlin.Suppress

/**
 *
 * @property kmsKeyId The AWS Key Management Service (KMS) key ARN that SageMaker Feature Store uses to encrypt the Amazon S3 objects at rest using Amazon S3 server-side encryption.
 * The caller (either user or IAM role) of `CreateFeatureGroup` must have below permissions to the `OnlineStore` `KmsKeyId` :
 * - `"kms:Encrypt"`
 * - `"kms:Decrypt"`
 * - `"kms:DescribeKey"`
 * - `"kms:CreateGrant"`
 * - `"kms:RetireGrant"`
 * - `"kms:ReEncryptFrom"`
 * - `"kms:ReEncryptTo"`
 * - `"kms:GenerateDataKey"`
 * - `"kms:ListAliases"`
 * - `"kms:ListGrants"`
 * - `"kms:RevokeGrant"`
 * The caller (either user or IAM role) to all DataPlane operations ( `PutRecord` , `GetRecord` , `DeleteRecord` ) must have the following permissions to the `KmsKeyId` :
 * - `"kms:Decrypt"`
 */
public data class FeatureGroupOnlineStoreSecurityConfig(
    public val kmsKeyId: String? = null,
) {
    public companion object {
        public fun toKotlin(javaType: com.pulumi.awsnative.sagemaker.outputs.FeatureGroupOnlineStoreSecurityConfig): FeatureGroupOnlineStoreSecurityConfig = FeatureGroupOnlineStoreSecurityConfig(
            kmsKeyId = javaType.kmsKeyId().map({ args0 -> args0 }).orElse(null),
        )
    }
}