AWS::Comprehend::Flywheel DataSecurityConfig - Amazon CloudFormation
SyntaxProperties
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

AWS::Comprehend::Flywheel DataSecurityConfig

Data security configuration.

Syntax

To declare this entity in your Amazon CloudFormation template, use the following syntax:

JSON

{
  "DataLakeKmsKeyId" : String,
  "ModelKmsKeyId" : String,
  "VolumeKmsKeyId" : String,
  "VpcConfig" : VpcConfig
}

Properties

DataLakeKmsKeyId

ID for the Amazon KMS key that Amazon Comprehend uses to encrypt the data in the data lake.

Required: No

Type: String

Minimum: 1

Maximum: 2048

Update requires: No interruption

ModelKmsKeyId

ID for the Amazon KMS key that Amazon Comprehend uses to encrypt trained custom models. The ModelKmsKeyId can be either of the following formats:

  • KMS Key ID: "1234abcd-12ab-34cd-56ef-1234567890ab"

  • Amazon Resource Name (ARN) of a KMS Key: "arn:aws:kms:us-west-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab"

Required: No

Type: String

Minimum: 1

Maximum: 2048

Update requires: No interruption

VolumeKmsKeyId

ID for the Amazon KMS key that Amazon Comprehend uses to encrypt the volume.

Required: No

Type: String

Minimum: 1

Maximum: 2048

Update requires: No interruption

VpcConfig

Configuration parameters for an optional private Virtual Private Cloud (VPC) containing the resources you are using for the job. For more information, see Amazon VPC.

Required: No

Type: VpcConfig

Update requires: No interruption