software.amazon.awscdk.services.elasticsearch

Interface EncryptionAtRestOptions

All Superinterfaces:

software.amazon.jsii.JsiiSerializable

All Known Implementing Classes:

EncryptionAtRestOptions.Jsii$Proxy

Deprecated.

use opensearchservice module instead

@Generated(value="jsii-pacmak/1.67.0 (build 2c027f5)",
           date="2022-09-19T20:26:39.168Z")
 @Stability(value=Deprecated)
 @Deprecated
public interface EncryptionAtRestOptions
extends software.amazon.jsii.JsiiSerializable

(deprecated) Whether the domain should encrypt data at rest, and if so, the AWS Key Management Service (KMS) key to use.

Can only be used to create a new domain, not update an existing one. Requires Elasticsearch version 5.1 or later.

Example:

 Domain domain = Domain.Builder.create(this, "Domain")
         .version(ElasticsearchVersion.V7_1)
         .enforceHttps(true)
         .nodeToNodeEncryption(true)
         .encryptionAtRest(EncryptionAtRestOptions.builder()
                 .enabled(true)
                 .build())
         .fineGrainedAccessControl(AdvancedSecurityOptions.builder()
                 .masterUserName("master-user")
                 .build())
         .build();
 SecretValue masterUserPassword = domain.getMasterUserPassword();
 

Nested Class Summary

Nested Classes

Modifier and Type	Interface and Description
static class	EncryptionAtRestOptions.Builder Deprecated.
static class	EncryptionAtRestOptions.Jsii$Proxy Deprecated.

Method Summary

Modifier and Type	Method and Description
static EncryptionAtRestOptions.Builder	builder() Deprecated.
default Boolean	getEnabled() Deprecated. use opensearchservice module instead
default IKey	getKmsKey() Deprecated. use opensearchservice module instead

Methods inherited from interface software.amazon.jsii.JsiiSerializable

$jsii$toJson

Method Detail

getEnabled

@Stability(value=Deprecated)
 @Deprecated
 @Nullable
default Boolean getEnabled()

Deprecated. use opensearchservice module instead

(deprecated) Specify true to enable encryption at rest.

Default: - encryption at rest is disabled.

getKmsKey

@Stability(value=Deprecated)
 @Deprecated
 @Nullable
default IKey getKmsKey()

Deprecated. use opensearchservice module instead

(deprecated) Supply if using KMS key for encryption at rest.

Default: - uses default aws/es KMS key.

builder

@Stability(value=Deprecated)
 @Deprecated
static EncryptionAtRestOptions.Builder builder()

Deprecated.

Returns:

a EncryptionAtRestOptions.Builder of EncryptionAtRestOptions