Class DomainEncryptAtRest


  • public final class DomainEncryptAtRest
    extends java.lang.Object
    • Method Detail

      • enabled

        public java.lang.Boolean enabled()
        Returns:
        Whether to enable encryption at rest. If the `encryptAtRest` block is not provided then this defaults to `false`. Enabling encryption on new domains requires `elasticsearchVersion` 5.1 or greater.
      • kmsKeyId

        public java.util.Optional<java.lang.String> kmsKeyId()
        Returns:
        KMS key ARN to encrypt the Elasticsearch domain with. If not specified then it defaults to using the `aws/es` service KMS key. Note that KMS will accept a KMS key ID but will return the key ARN. To prevent the provider detecting unwanted changes, use the key ARN instead.