pulumi-aws-kotlin/com.pulumi.aws.elasticsearch.kotlin.outputs/DomainEncryptAtRest

DomainEncryptAtRest

data class DomainEncryptAtRest(val enabled: Boolean, val kmsKeyId: String? = null)

Constructors

Link copied to clipboard
constructor(enabled: Boolean, kmsKeyId: String? = null)

Types

Link copied to clipboard
object Companion

Properties

Link copied to clipboard
val enabled: Boolean

Whether to enable encryption at rest. If the encrypt_at_rest block is not provided then this defaults to false. Enabling encryption on new domains requires elasticsearch_version 5.1 or greater.

Link copied to clipboard
val kmsKeyId: String? = null

KMS key ARN to encrypt the Elasticsearch domain with. If not specified then it defaults to using the aws/es service KMS key. Note that KMS will accept a KMS key ID but will return the key ARN. To prevent the provider detecting unwanted changes, use the key ARN instead.