AwsElasticsearchDomainEncryptionAtRestOptions - AWS Security Hub CSPM
This documentation is a draft for private preview for regions in the AWS European Sovereign Cloud. Documentation content will continue to evolve. Published: January 12, 2026.

AwsElasticsearchDomainEncryptionAtRestOptions

Details about the configuration for encryption at rest.

Contents

Enabled

Whether encryption at rest is enabled.

Type: Boolean

Required: No

KmsKeyId

The AWS KMS key ID. Takes the form 1a2a3a4-1a2a-3a4a-5a6a-1a2a3a4a5a6a.

Type: String

Pattern: .*\S.*

Required: No

See Also

For more information about using this API in one of the language-specific AWS SDKs, see the following: