我正在尝试使用cloudformation脚本创建胶水安全性配置,但出现以下错误:属性验证失败:[属性{/ EncryptionConfiguration / S3Encryptions}的值与类型{Array}不匹配]
进行S3加密的正确方法是什么?
AWSTemplateFormatVersion: 2010-09-09
Description: Script creates resources for GlueSecurityConfiguration
Resources:
GlueSecurityConfiguration:
Type: AWS::Glue::SecurityConfiguration
Properties:
EncryptionConfiguration:
S3Encryptions:
KmsKeyArn: !Ref KMSArn
S3EncryptionMode: SSE-KMS
JobBookmarksEncryption:
KmsKeyArn: !Ref KMSArn
CloudWatchEncryption:
KmsKeyArn: !Ref KMSArn
Name: !Sub '${SystemValue}-${SubSystemValue}'
我认为应该
- KmsKeyArn: !Ref KMSArn
S3EncryptionMode: SSE-KMS
因为S3Encryptions需要一个数组。