AWS GovCloud (US-West) User Guide
AWS GovCloud (US-West) User Guide

Amazon Elasticsearch Service

Amazon Elasticsearch Service (Amazon ES) is a managed service that makes it easy to deploy, operate, and scale Elasticsearch, a popular open-source search and analytics engine. Amazon ES also offers security options, high availability, data durability, and direct access to the Elasticsearch API.

The following list details the differences for using this service in the AWS GovCloud (US-West) Region compared to other AWS Regions:

  • The Amazon Elasticsearch Service endpoint does not yet support FIPS 140-2.

For more information about Amazon Elasticsearch Service, see the documentation.

ITAR Boundary

AWS GovCloud (US) has an ITAR boundary, which defines where customers are allowed to store ITAR-controlled data for this service in the AWS GovCloud (US-West) Region. To maintain ITAR compliance, you must place ITAR-controlled data on the applicable part of the ITAR boundary. If you do not have any ITAR-controlled data in the AWS GovCloud (US-West) Region, this section does not apply to you. The following information identifies the ITAR boundary for this service:

ITAR-Regulated Data Permitted

ITAR-Regulated Data Not Permitted

  • All documents entered, stored, and processed in an Elasticsearch cluster can contain ITAR-regulated data.

  • Amazon Elasticsearch Service metadata is not permitted to contain ITAR-regulated data. This metadata includes all configuration data that you specify when creating and maintaining your Elasticsearch clusters and indices, such as index names, alias names, tags, snapshot names, and repository names.

  • Do not enter ITAR-regulated data in the following fields:

    • Domain name

    • Index names

    • Type names

    • Document IDs

    • Snapshot names

    • Resource tags

    • Repository names

    • Alias names

    • CloudWatch log group names

On this page: