Control: AWS > Glue > Data Catalog > Connection Password Encryption

Define the Connection Password Encryption settings required for AWS > Glue > Data Catalog.

Connection Password Encryption refers specifically to the encryption of data when written to an underlying storage system. This control determines whether the resource is encrypted at rest, and sets encryption to your desired level.

The Connection Password Encryption control compares the encryption settings against the encryption policies for the resource (AWS > Glue > Data Catalog > Connection Password Encryption > *), raises an alarm, and takes the defined enforcement action.

Resource Types

This control targets the following resource types:

AWS > Glue > Data Catalog

Policies

The following policies can be used to configure this control:

AWS > Glue > Data Catalog > Connection Password Encryption

This control type relies on these other policies when running actions:

AWS > Glue > Data Catalog > Connection Password Encryption > Customer Managed Key

Permissions

Cloud permissions used by this control and its actions:

glue:PutDataCatalogEncryptionSettings

In Your Workspace

Developers

Control Type URI

tmod:@turbot/aws-glue#/control/types/dataCatalogConnectionPasswordEncryption

Category URI

tmod:@turbot/turbot#/control/categories/resourceEncryptionAtRest

GraphQL

query controlType(id: "tmod:@turbot/aws-glue#/control/types/dataCatalogConnectionPasswordEncryption") { … }

query controls(filter: "controlTypeId:'tmod:@turbot/aws-glue#/control/types/dataCatalogConnectionPasswordEncryption'") { … }

CLI

Get Controls

turbot graphql controls --filter "controlTypeId:tmod:@turbot/aws-glue#/control/types/dataCatalogConnectionPasswordEncryption"