Package software.amazon.awscdk.services.opensearchservice

Interface EncryptionAtRestOptions

All Superinterfaces:
software.amazon.jsii.JsiiSerializable
All Known Implementing Classes:
EncryptionAtRestOptions.Jsii$Proxy
@Generated(value="jsii-pacmak/1.125.0 (build fdbe357)", date="2026-01-08T14:57:09.792Z") @Stability(Stable) public interface EncryptionAtRestOptions extends software.amazon.jsii.JsiiSerializable
Whether the domain should encrypt data at rest, and if so, the AWS Key Management Service (KMS) key to use.

Can only be used to create a new domain, not update an existing one. Requires Elasticsearch version 5.1 or later or OpenSearch version 1.0 or later.

Example: 

 import software.amazon.awscdk.services.opensearchservice.*;
 Domain domain = Domain.Builder.create(this, "Domain")
         .version(EngineVersion.OPENSEARCH_2_17)
         .encryptionAtRest(EncryptionAtRestOptions.builder()
                 .enabled(true)
                 .build())
         .nodeToNodeEncryption(true)
         .enforceHttps(true)
         .capacity(CapacityConfig.builder()
                 .multiAzWithStandbyEnabled(false)
                 .build())
         .ebs(EbsOptions.builder()
                 .enabled(true)
                 .volumeSize(10)
                 .build())
         .build();
 EventApi api = EventApi.Builder.create(this, "EventApiOpenSearch")
         .apiName("OpenSearchEventApi")
         .build();
 AppSyncOpenSearchDataSource dataSource = api.addOpenSearchDataSource("opensearchds", domain);