Policy: AWS > Glue > Data Catalog > Connection Password Encryption

Define the Connection Password Encryption settings required for AWS > Glue > Data Catalog.

Connection Password Encryption refers specifically to the encryption of data when written to an underlying storage system. This control determines whether the resource is encrypted at rest, and sets encryption to your desired level.

The Connection Password Encryption control compares the encryption settings against the encryption policies for the resource (AWS > Glue > Data Catalog > Connection Password Encryption > *), raises an alarm, and takes the defined enforcement action

Resource Types

This policy targets the following resource types:

AWS > Glue > Data Catalog

Customer Managed Key

Controls

AWS > Glue > Data Catalog > Connection Password Encryption

Policy Specification

Schema Type	`string`
Default	`Skip`
Valid Values [YAML]	`Skip` `Check: None` `Check: None or higher` `Check: AWS managed key` `Check: AWS managed key or higher` `Check: Customer managed key` `Check: Connection Password Encryption > Customer Managed Key` `Enforce: None` `Enforce: AWS managed key` `Enforce: AWS managed key or higher` `Enforce: Customer managed key` `Enforce: Connection Password Encryption > Customer Managed Key`
Examples [YAML]	`Check: None or higher`

In Your Workspace

Policy Settings by Type report

Developers

Category URI

tmod:@turbot/turbot#/control/categories/resourceEncryptionAtRest

Policy Type URI

tmod:@turbot/aws-glue#/policy/types/dataCatalogConnectionPasswordEncryption

GraphQL

query policyType(id: "tmod:@turbot/aws-glue#/policy/types/dataCatalogConnectionPasswordEncryption") { … }

query policySettings(filter: "policyTypeId:'tmod:@turbot/aws-glue#/policy/types/dataCatalogConnectionPasswordEncryption'") { … }

query policyValues(filter: "policyTypeId:'tmod:@turbot/aws-glue#/policy/types/dataCatalogConnectionPasswordEncryption'") { … }

CLI

Get Policy Type

turbot graphql policy-type --id "tmod:@turbot/aws-glue#/policy/types/dataCatalogConnectionPasswordEncryption"

Get Policy Settings

turbot graphql policy-settings --filter "policyTypeId:tmod:@turbot/aws-glue#/policy/types/dataCatalogConnectionPasswordEncryption"