Package software.amazon.awscdk.services.opensearchservice

Interface EncryptionAtRestOptions

All Superinterfaces:
software.amazon.jsii.JsiiSerializable
All Known Implementing Classes:
EncryptionAtRestOptions.Jsii$Proxy
@Generated(value="jsii-pacmak/1.104.0 (build e79254c)", date="2024-11-22T02:24:05.066Z") @Stability(Stable) public interface EncryptionAtRestOptions extends software.amazon.jsii.JsiiSerializable
Whether the domain should encrypt data at rest, and if so, the AWS Key Management Service (KMS) key to use.

Can only be used to create a new domain, not update an existing one. Requires Elasticsearch version 5.1 or later or OpenSearch version 1.0 or later.

Example: 

 Domain domain = Domain.Builder.create(this, "Domain")
         .version(EngineVersion.OPENSEARCH_1_0)
         .enforceHttps(true)
         .nodeToNodeEncryption(true)
         .encryptionAtRest(EncryptionAtRestOptions.builder()
                 .enabled(true)
                 .build())
         .fineGrainedAccessControl(AdvancedSecurityOptions.builder()
                 .masterUserName("master-user")
                 .samlAuthenticationEnabled(true)
                 .samlAuthenticationOptions(SAMLOptionsProperty.builder()
                         .idpEntityId("entity-id")
                         .idpMetadataContent("metadata-content-with-quotes-escaped")
                         .build())
                 .build())
         .build();