AWS::Forecast::Dataset EncryptionConfig - Amazon CloudFormation
SyntaxProperties
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

AWS::Forecast::Dataset EncryptionConfig

An Amazon Key Management Service (KMS) key and an Amazon Identity and Access Management (IAM) role that Amazon Forecast can assume to access the key. You can specify this optional object in the CreateDataset and CreatePredictor requests.

Syntax

To declare this entity in your Amazon CloudFormation template, use the following syntax:

JSON

{
  "KmsKeyArn" : String,
  "RoleArn" : String
}

YAML

  KmsKeyArn: String
  RoleArn: String

Properties

KmsKeyArn

The Amazon Resource Name (ARN) of the KMS key.

Required: No

Type: String

Pattern: arn:aws[-a-z]*:kms:.*:key/.*

Maximum: 256

Update requires: No interruption

RoleArn

The ARN of the IAM role that Amazon Forecast can assume to access the Amazon KMS key.

Passing a role across Amazon accounts is not allowed. If you pass a role that isn't in your account, you get an InvalidInputException error.

Required: No

Type: String

Pattern: ^[a-zA-Z0-9\-\_\.\/\:]+$

Maximum: 256

Update requires: No interruption