{
 "additionalProperties": false,
 "createOnlyProperties": [
  "/properties/CatalogId"
 ],
 "definitions": {
  "ConnectionPasswordEncryption": {
   "additionalProperties": false,
   "properties": {
    "KmsKeyId": {
     "anyOf": [
      {
       "format": "AWS::KMS::Key.Arn"
      },
      {
       "format": "AWS::KMS::Key.Id"
      },
      {
       "format": "AWS::KMS::Alias.AliasName"
      }
     ],
     "type": "string"
    },
    "ReturnConnectionPasswordEncrypted": {
     "type": "boolean"
    }
   },
   "type": "object"
  },
  "DataCatalogEncryptionSettings": {
   "additionalProperties": false,
   "properties": {
    "ConnectionPasswordEncryption": {
     "$ref": "#/definitions/ConnectionPasswordEncryption"
    },
    "EncryptionAtRest": {
     "$ref": "#/definitions/EncryptionAtRest"
    }
   },
   "type": "object"
  },
  "EncryptionAtRest": {
   "additionalProperties": false,
   "properties": {
    "CatalogEncryptionMode": {
     "type": "string"
    },
    "CatalogEncryptionServiceRole": {
     "type": "string"
    },
    "SseAwsKmsKeyId": {
     "type": "string"
    }
   },
   "type": "object"
  }
 },
 "primaryIdentifier": [
  "/properties/Id"
 ],
 "properties": {
  "CatalogId": {
   "type": "string"
  },
  "DataCatalogEncryptionSettings": {
   "$ref": "#/definitions/DataCatalogEncryptionSettings"
  },
  "Id": {
   "type": "string"
  }
 },
 "readOnlyProperties": [
  "/properties/Id"
 ],
 "required": [
  "DataCatalogEncryptionSettings",
  "CatalogId"
 ],
 "typeName": "AWS::Glue::DataCatalogEncryptionSettings"
}
