com.amazonaws.services.sagemaker.model

Class OnlineStoreSecurityConfig

java.lang.Object

com.amazonaws.services.sagemaker.model.OnlineStoreSecurityConfig

All Implemented Interfaces:

StructuredPojo, Serializable, Cloneable

@Generated(value="com.amazonaws:aws-java-sdk-code-generator")
public class OnlineStoreSecurityConfig
extends Object
implements Serializable, Cloneable, StructuredPojo

The security configuration for OnlineStore.

See Also:

AWS API Documentation, Serialized Form

Constructor Summary

Constructors

Constructor and Description
OnlineStoreSecurityConfig()

Method Summary

Modifier and Type	Method and Description
OnlineStoreSecurityConfig	clone()
boolean	equals(Object obj)
String	getKmsKeyId() The ID of the Amazon Web Services Key Management Service (Amazon Web Services KMS) key that SageMaker Feature Store uses to encrypt the Amazon S3 objects at rest using Amazon S3 server-side encryption.
int	hashCode()
void	marshall(ProtocolMarshaller protocolMarshaller) Marshalls this structured data using the given ProtocolMarshaller.
void	setKmsKeyId(String kmsKeyId) The ID of the Amazon Web Services Key Management Service (Amazon Web Services KMS) key that SageMaker Feature Store uses to encrypt the Amazon S3 objects at rest using Amazon S3 server-side encryption.
String	toString() Returns a string representation of this object.
OnlineStoreSecurityConfig	withKmsKeyId(String kmsKeyId) The ID of the Amazon Web Services Key Management Service (Amazon Web Services KMS) key that SageMaker Feature Store uses to encrypt the Amazon S3 objects at rest using Amazon S3 server-side encryption.

Methods inherited from class java.lang.Object

getClass, notify, notifyAll, wait, wait, wait

Constructor Detail

OnlineStoreSecurityConfig

public OnlineStoreSecurityConfig()

Method Detail

setKmsKeyId

public void setKmsKeyId(String kmsKeyId)

The ID of the Amazon Web Services Key Management Service (Amazon Web Services KMS) key that SageMaker Feature Store uses to encrypt the Amazon S3 objects at rest using Amazon S3 server-side encryption.

The caller (either IAM user or IAM role) of CreateFeatureGroup must have below permissions to the OnlineStore KmsKeyId:

• "kms:Encrypt"

• "kms:Decrypt"

• "kms:DescribeKey"

• "kms:CreateGrant"

• "kms:RetireGrant"

• "kms:ReEncryptFrom"

• "kms:ReEncryptTo"

• "kms:GenerateDataKey"

• "kms:ListAliases"

• "kms:ListGrants"

• "kms:RevokeGrant"

The caller (either IAM user or IAM role) to all DataPlane operations (PutRecord, GetRecord, DeleteRecord) must have the following permissions to the KmsKeyId:

• "kms:Decrypt"

Parameters:

kmsKeyId - The ID of the Amazon Web Services Key Management Service (Amazon Web Services KMS) key that SageMaker Feature Store uses to encrypt the Amazon S3 objects at rest using Amazon S3 server-side encryption.

The caller (either IAM user or IAM role) of CreateFeatureGroup must have below permissions to the OnlineStore KmsKeyId:

• "kms:Encrypt"

• "kms:Decrypt"

• "kms:DescribeKey"

• "kms:CreateGrant"

• "kms:RetireGrant"

• "kms:ReEncryptFrom"

• "kms:ReEncryptTo"

• "kms:GenerateDataKey"

• "kms:ListAliases"

• "kms:ListGrants"

• "kms:RevokeGrant"

The caller (either IAM user or IAM role) to all DataPlane operations (PutRecord, GetRecord, DeleteRecord) must have the following permissions to the KmsKeyId:

• "kms:Decrypt"

getKmsKeyId

public String getKmsKeyId()

The ID of the Amazon Web Services Key Management Service (Amazon Web Services KMS) key that SageMaker Feature Store uses to encrypt the Amazon S3 objects at rest using Amazon S3 server-side encryption.

The caller (either IAM user or IAM role) of CreateFeatureGroup must have below permissions to the OnlineStore KmsKeyId:

• "kms:Encrypt"

• "kms:Decrypt"

• "kms:DescribeKey"

• "kms:CreateGrant"

• "kms:RetireGrant"

• "kms:ReEncryptFrom"

• "kms:ReEncryptTo"

• "kms:GenerateDataKey"

• "kms:ListAliases"

• "kms:ListGrants"

• "kms:RevokeGrant"

The caller (either IAM user or IAM role) to all DataPlane operations (PutRecord, GetRecord, DeleteRecord) must have the following permissions to the KmsKeyId:

• "kms:Decrypt"

Returns:

The ID of the Amazon Web Services Key Management Service (Amazon Web Services KMS) key that SageMaker Feature Store uses to encrypt the Amazon S3 objects at rest using Amazon S3 server-side encryption.

The caller (either IAM user or IAM role) of CreateFeatureGroup must have below permissions to the OnlineStore KmsKeyId:

• "kms:Encrypt"

• "kms:Decrypt"

• "kms:DescribeKey"

• "kms:CreateGrant"

• "kms:RetireGrant"

• "kms:ReEncryptFrom"

• "kms:ReEncryptTo"

• "kms:GenerateDataKey"

• "kms:ListAliases"

• "kms:ListGrants"

• "kms:RevokeGrant"

The caller (either IAM user or IAM role) to all DataPlane operations (PutRecord, GetRecord, DeleteRecord) must have the following permissions to the KmsKeyId:

• "kms:Decrypt"

withKmsKeyId

public OnlineStoreSecurityConfig withKmsKeyId(String kmsKeyId)

The ID of the Amazon Web Services Key Management Service (Amazon Web Services KMS) key that SageMaker Feature Store uses to encrypt the Amazon S3 objects at rest using Amazon S3 server-side encryption.

The caller (either IAM user or IAM role) of CreateFeatureGroup must have below permissions to the OnlineStore KmsKeyId:

• "kms:Encrypt"

• "kms:Decrypt"

• "kms:DescribeKey"

• "kms:CreateGrant"

• "kms:RetireGrant"

• "kms:ReEncryptFrom"

• "kms:ReEncryptTo"

• "kms:GenerateDataKey"

• "kms:ListAliases"

• "kms:ListGrants"

• "kms:RevokeGrant"

The caller (either IAM user or IAM role) to all DataPlane operations (PutRecord, GetRecord, DeleteRecord) must have the following permissions to the KmsKeyId:

• "kms:Decrypt"

Parameters:

kmsKeyId - The ID of the Amazon Web Services Key Management Service (Amazon Web Services KMS) key that SageMaker Feature Store uses to encrypt the Amazon S3 objects at rest using Amazon S3 server-side encryption.

The caller (either IAM user or IAM role) of CreateFeatureGroup must have below permissions to the OnlineStore KmsKeyId:

• "kms:Encrypt"

• "kms:Decrypt"

• "kms:DescribeKey"

• "kms:CreateGrant"

• "kms:RetireGrant"

• "kms:ReEncryptFrom"

• "kms:ReEncryptTo"

• "kms:GenerateDataKey"

• "kms:ListAliases"

• "kms:ListGrants"

• "kms:RevokeGrant"

The caller (either IAM user or IAM role) to all DataPlane operations (PutRecord, GetRecord, DeleteRecord) must have the following permissions to the KmsKeyId:

• "kms:Decrypt"

Returns:

Returns a reference to this object so that method calls can be chained together.

toString

public String toString()

Returns a string representation of this object. This is useful for testing and debugging. Sensitive data will be redacted from this string using a placeholder value.

Overrides:

toString in class Object

Returns:

A string representation of this object.

See Also:

Object.toString()

equals

public boolean equals(Object obj)

Overrides:

equals in class Object

hashCode

public int hashCode()

Overrides:

hashCode in class Object

clone

public OnlineStoreSecurityConfig clone()

Overrides:

clone in class Object

marshall

public void marshall(ProtocolMarshaller protocolMarshaller)

Description copied from interface: StructuredPojo

Marshalls this structured data using the given ProtocolMarshaller.

Specified by:

marshall in interface StructuredPojo

Parameters:

protocolMarshaller - Implementation of ProtocolMarshaller used to marshall this object's data.