@Generated(value="jsii-pacmak/1.73.0 (build 6faeda3)",
date="2023-01-31T18:36:57.854Z")
public interface EncryptionAtRestOptions
Can only be used to create a new domain, not update an existing one. Requires Elasticsearch version 5.1 or later or OpenSearch version 1.0 or later.
Example:
Domain domain = Domain.Builder.create(this, "Domain") .version(EngineVersion.OPENSEARCH_1_0) .enforceHttps(true) .nodeToNodeEncryption(true) .encryptionAtRest(EncryptionAtRestOptions.builder() .enabled(true) .build()) .fineGrainedAccessControl(AdvancedSecurityOptions.builder() .masterUserName("master-user") .build()) .logging(LoggingOptions.builder() .auditLogEnabled(true) .slowSearchLogEnabled(true) .appLogEnabled(true) .slowIndexLogEnabled(true) .build()) .build();
Modifier and Type | Interface and Description |
---|---|
static class |
EncryptionAtRestOptions.Builder
A builder for
EncryptionAtRestOptions |
static class |
EncryptionAtRestOptions.Jsii$Proxy
An implementation for
EncryptionAtRestOptions |
Modifier and Type | Method and Description |
---|---|
static EncryptionAtRestOptions.Builder |
builder() |
default java.lang.Boolean |
getEnabled()
Specify true to enable encryption at rest.
|
default IKey |
getKmsKey()
Supply if using KMS key for encryption at rest.
|
default java.lang.Boolean getEnabled()
Default: - encryption at rest is disabled.
default IKey getKmsKey()
Default: - uses default aws/es KMS key.
static EncryptionAtRestOptions.Builder builder()
EncryptionAtRestOptions.Builder
of EncryptionAtRestOptions