import { Value } from '../../../cloudformation/Value';
/**
  If query results are encrypted in Amazon S3, indicates the encryption option used (for example, <code>SSE_KMS</code> or <code>CSE_KMS</code>) and key information.
  For full documentation go to <a href="http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-athena-workgroup-encryptionconfiguration.html">the AWS Docs</a>
*/
export interface EncryptionConfigurationProps {
    /** <code>EncryptionOption</code>  <a name="cfn-athena-workgroup-encryptionconfiguration-encryptionoption"></a>
  Indicates whether Amazon S3 server-side encryption with Amazon S3-managed keys (<code>SSE_S3</code>), server-side encryption with KMS-managed keys (<code>SSE_KMS</code>), or client-side encryption with KMS-managed keys (<code>CSE_KMS</code>) is used.<br />
  If a query runs in a workgroup and the workgroup overrides client-side settings, then the workgroup’s setting for encryption is used. It specifies whether query results must be encrypted, for all queries that run in this workgroup.<br />
  
  Required: Yes<br />
  
  Allowed values: <code>CSE_KMS | SSE_KMS | SSE_S3</code><br />
  
  Update requires: <a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt">No interruption</a> */
    encryptionOption: Value<'CSE_KMS' | 'SSE_KMS' | 'SSE_S3'>;
    /** <code>KmsKey</code>  <a name="cfn-athena-workgroup-encryptionconfiguration-kmskey"></a>
  For <code>SSE_KMS</code> and <code>CSE_KMS</code>, this is the KMS key ARN or ID.<br />
  
  Required: No<br />
  
  Update requires: <a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt">No interruption</a> */
    kmsKey?: Value<string>;
}
