[New]: The aws_glue_security_configuration resource should support encrypting Glue Data Quality .

[vaquarkhan]

Description

Currently aws_glue_security_configuration is not have support to add encryption for Glue data quality . if glue data quality not encrypted then Glue security configuration show disabled even you encrypt S3, KMS and CLoudwatch . which flag as security findings . looking to add support so via terraform we can add glue data quality encryption
Document:
https://registry.terraform.io/providers/hashicorp/aws/4.1.0/docs/resources/glue_security_configuration
Images

Requested Resource(s) and/or Data Source(s)

aws_glue_security_configuration data quality encryption

Potential Terraform Configuration

resource "aws_glue_security_configuration" "example" {
  name = "example"

  encryption_configuration {
    cloudwatch_encryption {
      cloudwatch_encryption_mode = "DISABLED"
    }

    job_bookmarks_encryption {
      job_bookmarks_encryption_mode = "DISABLED"
    }

    s3_encryption {
      kms_key_arn        = data.aws_kms_key.example.arn
      s3_encryption_mode = "SSE-KMS"
    }
    # Add new feature
    data_quality_encryption {
      kms_key_arn        = data.aws_kms_key.example.arn
      data_quality_encryption_mode = "SSE-KMS"
    }
  }
}

References

• https://registry.terraform.io/providers/hashicorp/aws/4.1.0/docs/resources/glue_security_configuration
• https://docs.aws.amazon.com/glue/latest/dg/data-quality-encryption.html

Would you like to implement a fix?

Yes

[github-actions]

Community Note

Voting for Prioritization

• Please vote on this issue by adding a 👍 reaction to the original post to help the community and maintainers prioritize this request.
• Please see our prioritization guide for information on how we prioritize.
• Please do not leave "+1" or other comments that do not add relevant new information or questions, they generate extra noise for issue followers and do not help prioritize the request.

Volunteering to Work on This Issue

• If you are interested in working on this issue, please leave a comment.
• If this would be your first contribution, please review the contribution guide.

[vaquarkhan]

do we need any process or i can start work on this enhancement ?

[vaquarkhan]

Code changes are done , we have following blocker for release this enhancement - aws/aws-sdk-go-v2#2893

[vaquarkhan]

Code ready for review - #41414