interface EncryptionAtRestOptionsProperty
Language | Type name |
---|---|
.NET | Amazon.CDK.AWS.OpenSearchService.CfnDomain.EncryptionAtRestOptionsProperty |
Java | software.amazon.awscdk.services.opensearchservice.CfnDomain.EncryptionAtRestOptionsProperty |
Python | aws_cdk.aws_opensearchservice.CfnDomain.EncryptionAtRestOptionsProperty |
TypeScript | @aws-cdk/aws-opensearchservice » CfnDomain » EncryptionAtRestOptionsProperty |
Whether the domain should encrypt data at rest, and if so, the AWS Key Management Service key to use.
Example
// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import * as opensearchservice from '@aws-cdk/aws-opensearchservice';
const encryptionAtRestOptionsProperty: opensearchservice.CfnDomain.EncryptionAtRestOptionsProperty = {
enabled: false,
kmsKeyId: 'kmsKeyId',
};
Properties
Name | Type | Description |
---|---|---|
enabled? | boolean | IResolvable | Specify true to enable encryption at rest. |
kms | string | The KMS key ID. Takes the form 1a2a3a4-1a2a-3a4a-5a6a-1a2a3a4a5a6a . Required if you enable encryption at rest. |
enabled?
Type:
boolean |
IResolvable
(optional)
Specify true
to enable encryption at rest.
Required if you enable fine-grained access control in AdvancedSecurityOptionsInput .
kmsKeyId?
Type:
string
(optional)
The KMS key ID. Takes the form 1a2a3a4-1a2a-3a4a-5a6a-1a2a3a4a5a6a
. Required if you enable encryption at rest.
You can also use keyAlias
as a value.