Class DomainEncryptAtRestArgs.Builder

  • Enclosing class:
    DomainEncryptAtRestArgs

    public static final class DomainEncryptAtRestArgs.Builder
    extends java.lang.Object
    • Method Detail

      • enabled

        public DomainEncryptAtRestArgs.Builder enabled​(com.pulumi.core.Output<java.lang.Boolean> enabled)
        Parameters:
        enabled - Whether to enable encryption at rest. If the `encrypt_at_rest` block is not provided then this defaults to `false`. Enabling encryption on new domains requires `elasticsearch_version` 5.1 or greater.
        Returns:
        builder
      • enabled

        public DomainEncryptAtRestArgs.Builder enabled​(java.lang.Boolean enabled)
        Parameters:
        enabled - Whether to enable encryption at rest. If the `encrypt_at_rest` block is not provided then this defaults to `false`. Enabling encryption on new domains requires `elasticsearch_version` 5.1 or greater.
        Returns:
        builder
      • kmsKeyId

        public DomainEncryptAtRestArgs.Builder kmsKeyId​(@Nullable
                                                        com.pulumi.core.Output<java.lang.String> kmsKeyId)
        Parameters:
        kmsKeyId - KMS key ARN to encrypt the Elasticsearch domain with. If not specified then it defaults to using the `aws/es` service KMS key. Note that KMS will accept a KMS key ID but will return the key ARN. To prevent the provider detecting unwanted changes, use the key ARN instead.
        Returns:
        builder
      • kmsKeyId

        public DomainEncryptAtRestArgs.Builder kmsKeyId​(java.lang.String kmsKeyId)
        Parameters:
        kmsKeyId - KMS key ARN to encrypt the Elasticsearch domain with. If not specified then it defaults to using the `aws/es` service KMS key. Note that KMS will accept a KMS key ID but will return the key ARN. To prevent the provider detecting unwanted changes, use the key ARN instead.
        Returns:
        builder