Class DomainEncryptAtRest
- java.lang.Object
-
- com.pulumi.aws.elasticsearch.outputs.DomainEncryptAtRest
-
public final class DomainEncryptAtRest extends java.lang.Object
-
-
Nested Class Summary
Nested Classes Modifier and Type Class Description static classDomainEncryptAtRest.Builder
-
Method Summary
All Methods Static Methods Instance Methods Concrete Methods Modifier and Type Method Description static DomainEncryptAtRest.Builderbuilder()static DomainEncryptAtRest.Builderbuilder(DomainEncryptAtRest defaults)java.lang.Booleanenabled()java.util.Optional<java.lang.String>kmsKeyId()
-
-
-
Method Detail
-
enabled
public java.lang.Boolean enabled()
- Returns:
- Whether to enable encryption at rest. If the `encryptAtRest` block is not provided then this defaults to `false`. Enabling encryption on new domains requires `elasticsearchVersion` 5.1 or greater.
-
kmsKeyId
public java.util.Optional<java.lang.String> kmsKeyId()
- Returns:
- KMS key ARN to encrypt the Elasticsearch domain with. If not specified then it defaults to using the `aws/es` service KMS key. Note that KMS will accept a KMS key ID but will return the key ARN. To prevent the provider detecting unwanted changes, use the key ARN instead.
-
builder
public static DomainEncryptAtRest.Builder builder()
-
builder
public static DomainEncryptAtRest.Builder builder(DomainEncryptAtRest defaults)
-
-