AWS::OpenSearchServerless::Collection EncryptionConfig - AWS CloudFormation

This is the new CloudFormation Template Reference Guide. Please update your bookmarks and links. For help getting started with CloudFormation, see the AWS CloudFormation User Guide.

AWS::OpenSearchServerless::Collection EncryptionConfig

Encryption settings for the collection.

Syntax

To declare this entity in your CloudFormation template, use the following syntax:

JSON

{ "AWSOwnedKey" : Boolean, "KmsKeyArn" : String }

YAML

AWSOwnedKey: Boolean KmsKeyArn: String

Properties

AWSOwnedKey

Indicates whether to use an AWS-owned key for encryption.

Required: No

Type: Boolean

Update requires: Replacement

KmsKeyArn

The ARN of the AWS KMS key used to encrypt the collection.

Required: No

Type: String

Pattern: arn:(aws|aws-us-gov|aws-cn|aws-iso|aws-iso-b):kms:[a-z0-9-]+:[0-9]{12}:key/[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}

Minimum: 10

Maximum: 100

Update requires: Replacement