Interface IEncryptionAtRestOptions

(deprecated) Whether the domain should encrypt data at rest, and if so, the AWS Key Management Service (KMS) key to use.

Namespace: Amazon.CDK.AWS.Elasticsearch

Assembly: Amazon.CDK.Lib.dll

Syntax (csharp)

public interface IEncryptionAtRestOptions

Syntax (vb)

Public Interface IEncryptionAtRestOptions

Remarks

Can only be used to create a new domain, not update an existing one. Requires Elasticsearch version 5.1 or later.

Stability: Deprecated

ExampleMetadata: infused

Examples

var domain = new Domain(this, "Domain", new DomainProps {
    Version = ElasticsearchVersion.V7_1,
    EnforceHttps = true,
    NodeToNodeEncryption = true,
    EncryptionAtRest = new EncryptionAtRestOptions {
        Enabled = true
    },
    FineGrainedAccessControl = new AdvancedSecurityOptions {
        MasterUserName = "master-user"
    }
});

var masterUserPassword = domain.MasterUserPassword;

Synopsis

Properties

Enabled	(deprecated) Specify true to enable encryption at rest.
KmsKey	(deprecated) Supply if using KMS key for encryption at rest.

Properties

Enabled

(deprecated) Specify true to enable encryption at rest.

virtual Nullable<bool> Enabled { get; }

Property Value

System.Nullable<System.Boolean>

Remarks

Default: - encryption at rest is disabled.

Stability: Deprecated

KmsKey

(deprecated) Supply if using KMS key for encryption at rest.

virtual IKey KmsKey { get; }

Property Value

IKey

Remarks

Default: - uses default aws/es KMS key.

Stability: Deprecated