Warm tip: This article is reproduced from serverfault.com, please click

amazon web services-使用Cloudformation脚本创建GlueSecurityConfiguration时出错

(amazon web services - Error when creating GlueSecurityConfiguration using Cloudformation script)

发布于 2020-12-02 15:08:33

我正在尝试使用cloudformation脚本创建胶水安全性配置,但出现以下错误:属性验证失败:[属性{/ EncryptionConfiguration / S3Encryptions}的值与类型{Array}不匹配]

进行S3加密的正确方法是什么?

AWSTemplateFormatVersion: 2010-09-09
Description: Script creates resources for GlueSecurityConfiguration
    
Resources:
  GlueSecurityConfiguration:
    Type: AWS::Glue::SecurityConfiguration
    Properties: 
      EncryptionConfiguration: 
        S3Encryptions:
            KmsKeyArn: !Ref KMSArn
            S3EncryptionMode: SSE-KMS
        JobBookmarksEncryption:
          KmsKeyArn: !Ref KMSArn
        CloudWatchEncryption:
          KmsKeyArn: !Ref KMSArn
      Name: !Sub '${SystemValue}-${SubSystemValue}'
Questioner
Nirja Ayare
Viewed
0
Robert Kossendey 2020-12-02 23:12:32

我认为应该

- KmsKeyArn: !Ref KMSArn
  S3EncryptionMode: SSE-KMS

因为S3Encryptions需要一个数组。