AWS::OpenSearchServerless::Collection EncryptionConfig - AWS CloudFormation
Services or capabilities described in AWS documentation might vary by Region. To see the differences applicable to the AWS European Sovereign Cloud Region, see the AWS European Sovereign Cloud User Guide.

This is the new CloudFormation Template Reference Guide. Please update your bookmarks and links. For help getting started with CloudFormation, see the AWS CloudFormation User Guide.

AWS::OpenSearchServerless::Collection EncryptionConfig

Encryption settings for the collection.

Syntax

To declare this entity in your CloudFormation template, use the following syntax:

JSON

{ "AWSOwnedKey" : Boolean, "KmsKeyArn" : String }

YAML

AWSOwnedKey: Boolean KmsKeyArn: String

Properties

AWSOwnedKey

Indicates whether to use an AWS-owned key for encryption.

Required: No

Type: Boolean

Update requires: Replacement

KmsKeyArn

The ARN of the AWS KMS key used to encrypt the collection.

Required: No

Type: String

Pattern: arn:(aws|aws-us-gov|aws-cn|aws-iso|aws-iso-b):kms:[a-z0-9-]+:[0-9]{12}:key/[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}

Minimum: 10

Maximum: 100

Update requires: Replacement