Class OnlineStoreSecurityConfig

    • Method Detail

      • kmsKeyId

        public final String kmsKeyId()

        The Amazon Web Services Key Management Service (KMS) key ARN that SageMaker Feature Store uses to encrypt the Amazon S3 objects at rest using Amazon S3 server-side encryption.

        The caller (either user or IAM role) of CreateFeatureGroup must have below permissions to the OnlineStore KmsKeyId:

        • "kms:Encrypt"

        • "kms:Decrypt"

        • "kms:DescribeKey"

        • "kms:CreateGrant"

        • "kms:RetireGrant"

        • "kms:ReEncryptFrom"

        • "kms:ReEncryptTo"

        • "kms:GenerateDataKey"

        • "kms:ListAliases"

        • "kms:ListGrants"

        • "kms:RevokeGrant"

        The caller (either user or IAM role) to all DataPlane operations (PutRecord, GetRecord, DeleteRecord) must have the following permissions to the KmsKeyId:

        • "kms:Decrypt"

        Returns:
        The Amazon Web Services Key Management Service (KMS) key ARN that SageMaker Feature Store uses to encrypt the Amazon S3 objects at rest using Amazon S3 server-side encryption.

        The caller (either user or IAM role) of CreateFeatureGroup must have below permissions to the OnlineStore KmsKeyId:

        • "kms:Encrypt"

        • "kms:Decrypt"

        • "kms:DescribeKey"

        • "kms:CreateGrant"

        • "kms:RetireGrant"

        • "kms:ReEncryptFrom"

        • "kms:ReEncryptTo"

        • "kms:GenerateDataKey"

        • "kms:ListAliases"

        • "kms:ListGrants"

        • "kms:RevokeGrant"

        The caller (either user or IAM role) to all DataPlane operations (PutRecord, GetRecord, DeleteRecord) must have the following permissions to the KmsKeyId:

        • "kms:Decrypt"

      • hashCode

        public final int hashCode()
        Overrides:
        hashCode in class Object
      • equals

        public final boolean equals​(Object obj)
        Overrides:
        equals in class Object
      • toString

        public final String toString()
        Returns a string representation of this object. This is useful for testing and debugging. Sensitive data will be redacted from this string using a placeholder value.
        Overrides:
        toString in class Object
      • getValueForField

        public final <T> Optional<T> getValueForField​(String fieldName,
                                                      Class<T> clazz)