com.pulumi.awsnative.sagemaker.kotlin.inputs.FeatureGroupOnlineStoreSecurityConfigArgs.kt Maven / Gradle / Ivy

Go to download
@file:Suppress("NAME_SHADOWING", "DEPRECATION")

package com.pulumi.awsnative.sagemaker.kotlin.inputs

import com.pulumi.awsnative.sagemaker.inputs.FeatureGroupOnlineStoreSecurityConfigArgs.builder
import com.pulumi.core.Output
import com.pulumi.core.Output.of
import com.pulumi.kotlin.ConvertibleToJava
import com.pulumi.kotlin.PulumiTagMarker
import kotlin.String
import kotlin.Suppress
import kotlin.jvm.JvmName

/**
 *
 * @property kmsKeyId The AWS Key Management Service (KMS) key ARN that SageMaker Feature Store uses to encrypt the Amazon S3 objects at rest using Amazon S3 server-side encryption.
 * The caller (either user or IAM role) of `CreateFeatureGroup` must have below permissions to the `OnlineStore` `KmsKeyId` :
 * - `"kms:Encrypt"`
 * - `"kms:Decrypt"`
 * - `"kms:DescribeKey"`
 * - `"kms:CreateGrant"`
 * - `"kms:RetireGrant"`
 * - `"kms:ReEncryptFrom"`
 * - `"kms:ReEncryptTo"`
 * - `"kms:GenerateDataKey"`
 * - `"kms:ListAliases"`
 * - `"kms:ListGrants"`
 * - `"kms:RevokeGrant"`
 * The caller (either user or IAM role) to all DataPlane operations ( `PutRecord` , `GetRecord` , `DeleteRecord` ) must have the following permissions to the `KmsKeyId` :
 * - `"kms:Decrypt"`
 */
public data class FeatureGroupOnlineStoreSecurityConfigArgs(
    public val kmsKeyId: Output? = null,
) :
    ConvertibleToJava {
    override fun toJava(): com.pulumi.awsnative.sagemaker.inputs.FeatureGroupOnlineStoreSecurityConfigArgs =
        com.pulumi.awsnative.sagemaker.inputs.FeatureGroupOnlineStoreSecurityConfigArgs.builder()
            .kmsKeyId(kmsKeyId?.applyValue({ args0 -> args0 })).build()
}

/**
 * Builder for [FeatureGroupOnlineStoreSecurityConfigArgs].
 */
@PulumiTagMarker
public class FeatureGroupOnlineStoreSecurityConfigArgsBuilder internal constructor() {
    private var kmsKeyId: Output? = null

    /**
     * @param value The AWS Key Management Service (KMS) key ARN that SageMaker Feature Store uses to encrypt the Amazon S3 objects at rest using Amazon S3 server-side encryption.
     * The caller (either user or IAM role) of `CreateFeatureGroup` must have below permissions to the `OnlineStore` `KmsKeyId` :
     * - `"kms:Encrypt"`
     * - `"kms:Decrypt"`
     * - `"kms:DescribeKey"`
     * - `"kms:CreateGrant"`
     * - `"kms:RetireGrant"`
     * - `"kms:ReEncryptFrom"`
     * - `"kms:ReEncryptTo"`
     * - `"kms:GenerateDataKey"`
     * - `"kms:ListAliases"`
     * - `"kms:ListGrants"`
     * - `"kms:RevokeGrant"`
     * The caller (either user or IAM role) to all DataPlane operations ( `PutRecord` , `GetRecord` , `DeleteRecord` ) must have the following permissions to the `KmsKeyId` :
     * - `"kms:Decrypt"`
     */
    @JvmName("abvlhacfwxqhkgmw")
    public suspend fun kmsKeyId(`value`: Output) {
        this.kmsKeyId = value
    }

    /**
     * @param value The AWS Key Management Service (KMS) key ARN that SageMaker Feature Store uses to encrypt the Amazon S3 objects at rest using Amazon S3 server-side encryption.
     * The caller (either user or IAM role) of `CreateFeatureGroup` must have below permissions to the `OnlineStore` `KmsKeyId` :
     * - `"kms:Encrypt"`
     * - `"kms:Decrypt"`
     * - `"kms:DescribeKey"`
     * - `"kms:CreateGrant"`
     * - `"kms:RetireGrant"`
     * - `"kms:ReEncryptFrom"`
     * - `"kms:ReEncryptTo"`
     * - `"kms:GenerateDataKey"`
     * - `"kms:ListAliases"`
     * - `"kms:ListGrants"`
     * - `"kms:RevokeGrant"`
     * The caller (either user or IAM role) to all DataPlane operations ( `PutRecord` , `GetRecord` , `DeleteRecord` ) must have the following permissions to the `KmsKeyId` :
     * - `"kms:Decrypt"`
     */
    @JvmName("rflsqninxohlvylu")
    public suspend fun kmsKeyId(`value`: String?) {
        val toBeMapped = value
        val mapped = toBeMapped?.let({ args0 -> of(args0) })
        this.kmsKeyId = mapped
    }

    internal fun build(): FeatureGroupOnlineStoreSecurityConfigArgs =
        FeatureGroupOnlineStoreSecurityConfigArgs(
            kmsKeyId = kmsKeyId,
        )
}