class Aws::MediaConvert::Types::S3EncryptionSettings


@see docs.aws.amazon.com/goto/WebAPI/mediaconvert-2017-08-29/S3EncryptionSettings AWS API Documentation
@return [String]
CMK associated with Amazon S3.
to AWS KMS but don’t specify a CMK here, AWS uses the AWS managed
(SERVER_SIDE_ENCRYPTION_KMS). If you set Server-side encryption
(S3ServerSideEncryptionType) to AWS KMS
this setting, you must also set Server-side encryption
content. Enter the Amazon Resource Name (ARN) of the CMK. To use
use to encrypt the data key that AWS uses to encrypt your output
Optionally, specify the customer master key (CMK) that you want to
@!attribute [rw] kms_key_arn
@return [String]
context.
encryption context, see:
AWS KMS (SERVER_SIDE_ENCRYPTION_KMS). For more information about
must also set Server-side encryption (S3ServerSideEncryptionType) to
JSON which represents a string-string map. To use this setting, you
encryption. This value must be a base64-encoded UTF-8 string holding
additional authenticated data (AAD) to support authenticated
alongside your KMS key. AWS KMS uses this encryption context as
Optionally, specify the encryption context that you want to use
@!attribute [rw] kms_encryption_context
@return [String]
setting KMS ARN (kmsKeyArn).
so by specifying the Amazon Resource Name (ARN) of the key for the
optionally choose to specify a different, customer managed CMK. Do
associated with Amazon S3 to encrypt your data keys. You can
AWS KMS, KMS uses the AWS managed customer master key (CMK)
AWS KMS (SERVER_SIDE_ENCRYPTION_KMS). By default, when you choose
master key to be managed by AWS Key Management Service (KMS), choose
choose Amazon S3 (SERVER_SIDE_ENCRYPTION_S3). If you want your
specify which AWS service manages the CMK. For simplest set up,
data keys alongside your encrypted content. Use this setting to
using a customer master key (CMK), and then stores the encrypted
encrypt your content. AWS also encrypts the data keys themselves,
Specify how you want your data keys managed. AWS uses data keys to
@!attribute [rw] encryption_type
to Amazon S3.
Settings for how your job outputs are encrypted as they are uploaded