software.amazon.awscdk.services.opensearchservice

Interface EncryptionAtRestOptions

All Known Implementing Classes:

EncryptionAtRestOptions.Jsii$Proxy

@Generated(value="jsii-pacmak/1.52.1 (build 5ccc8f6)",
           date="2022-01-20T19:50:03.541Z")
public interface EncryptionAtRestOptions

Whether the domain should encrypt data at rest, and if so, the AWS Key Management Service (KMS) key to use.

Can only be used to create a new domain, not update an existing one. Requires Elasticsearch version 5.1 or later or OpenSearch version 1.0 or later.

Example:

 Domain domain = Domain.Builder.create(this, "Domain")
         .version(EngineVersion.OPENSEARCH_1_0)
         .enforceHttps(true)
         .nodeToNodeEncryption(true)
         .encryptionAtRest(EncryptionAtRestOptions.builder()
                 .enabled(true)
                 .build())
         .fineGrainedAccessControl(AdvancedSecurityOptions.builder()
                 .masterUserName("master-user")
                 .build())
         .build();
 SecretValue masterUserPassword = domain.getMasterUserPassword();
 

Nested Class Summary

Nested Classes

Modifier and Type	Interface and Description
static class	EncryptionAtRestOptions.Builder A builder for EncryptionAtRestOptions
static class	EncryptionAtRestOptions.Jsii$Proxy An implementation for EncryptionAtRestOptions

Method Summary

Modifier and Type	Method and Description
static EncryptionAtRestOptions.Builder	builder()
default java.lang.Boolean	getEnabled() Specify true to enable encryption at rest.
default IKey	getKmsKey() Supply if using KMS key for encryption at rest.

Method Detail

getEnabled

default java.lang.Boolean getEnabled()

Specify true to enable encryption at rest.

Default: - encryption at rest is disabled.

getKmsKey

default IKey getKmsKey()

Supply if using KMS key for encryption at rest.

Default: - uses default aws/es KMS key.

builder

static EncryptionAtRestOptions.Builder builder()

Returns:

a EncryptionAtRestOptions.Builder of EncryptionAtRestOptions