Encryption at Rest of ES data in cloud

Elastic Stack Elasticsearch
1

Hello All,

How do we encrypt ES data at rest on cloud. I read that dm-crypt is not for cloud solution. What are the options for hosting in cloud and what is the general industry standard for keeping logs and other data in ES in cloud?

2

https://www.elastic.co/guide/en/cloud/current/ec-faq.html#faq-encryption-at-rest

Does Elasticsearch Service support encryption at rest?
Yes, encryption at rest (EAR) is enabled in Elasticsearch Service by default. We support EAR for both the data stored in your clusters and the snapshots we take for backup, on all cloud platforms and across all regions.

We don't currently support providing your own keys for this at the moment though sorry.

1 Like
3

Thanks for the response. We use Logstash to send data to ES. As EAR is enabled by default, does it mean I don't have to configure anything in Logstash or ES?

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.