Encrypting your Data Catalog
You can protect your metadata stored in the Amazon Glue Data Catalog at rest using encryption keys managed by Amazon Key Management Service (Amazon KMS). You can enable Data Catalog encryption for new Data Catalog, by using the Data Catalog settings. You can enable or disable encryption for existing Data Catalog as needed. When enabled, Amazon Glue encrypts all new metadata written to the catalog, while existing metadata remains unencrypted.
For detailed information about encrypting your Data Catalog, see Encrypting your Data Catalog.