AWS::Comprehend::Flywheel DataSecurityConfig - AWS CloudFormation
Services or capabilities described in AWS documentation might vary by Region. To see the differences applicable to the AWS European Sovereign Cloud Region, see the AWS European Sovereign Cloud User Guide.

This is the new CloudFormation Template Reference Guide. Please update your bookmarks and links. For help getting started with CloudFormation, see the AWS CloudFormation User Guide.

AWS::Comprehend::Flywheel DataSecurityConfig

Data security configuration.

Syntax

To declare this entity in your CloudFormation template, use the following syntax:

JSON

{ "DataLakeKmsKeyId" : String, "ModelKmsKeyId" : String, "VolumeKmsKeyId" : String, "VpcConfig" : VpcConfig }

Properties

DataLakeKmsKeyId

ID for the AWS KMS key that Amazon Comprehend uses to encrypt the data in the data lake.

Required: No

Type: String

Minimum: 1

Maximum: 2048

Update requires: No interruption

ModelKmsKeyId

ID for the AWS KMS key that Amazon Comprehend uses to encrypt trained custom models. The ModelKmsKeyId can be either of the following formats:

  • KMS Key ID: "1234abcd-12ab-34cd-56ef-1234567890ab"

  • Amazon Resource Name (ARN) of a KMS Key: "arn:aws:kms:us-west-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab"

Required: No

Type: String

Minimum: 1

Maximum: 2048

Update requires: No interruption

VolumeKmsKeyId

ID for the AWS KMS key that Amazon Comprehend uses to encrypt the volume.

Required: No

Type: String

Minimum: 1

Maximum: 2048

Update requires: No interruption

VpcConfig

Configuration parameters for an optional private Virtual Private Cloud (VPC) containing the resources you are using for the job. For more information, see Amazon VPC.

Required: No

Type: VpcConfig

Update requires: No interruption