Get the KMS key ARN for an AWS Glue data catalog

Follow these steps to determine whether your Glue catalog has SSE-KMS encryption and, if it does, to obtain the KMS key ARN.

If you are using an AWS Glue data catalog table to refer to your dataset, the AWS Glue catalog might have SSE-KMS encryption. Follow these steps to determine whether your Glue catalog has SSE-KMS encryption and, if it does, to obtain the KMS key ARN.
  1. In a new browser tab, log in to the AWS account that contains your dataset and navigate to the AWS Glue console.
  2. In the left-hand navigation, select Data Catalog and then Catalog settings.
  3. Under Encryption options, if Metadata encryption is selected and you find an AWS KMS key ARN in the AWS KMS key for metadata encryption setting, copy it.
  4. Back in the browser tab that contains your federated search dataset definition, paste the copied ARN into the AWS KMS key ARNs setting and select its drop-down value to set it in. The resource access policy updates automatically with the new ARN.
Complete the Update policies step of your dataset setup. Return to Apply the dataset resource access policy to an AWS IAM role.