# Encryption at Rest of ES data in cloud

**URL:** <https://discuss.elastic.co/t/encryption-at-rest-of-es-data-in-cloud/230263>\
**Category:** Elasticsearch\
**Created:** [April 28, 2020, 10:30pm UTC](https://discuss.elastic.co/t/encryption-at-rest-of-es-data-in-cloud/230263 "2020-04-28T22:30:01Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![ArunaKannan](https://avatars.discourse-cdn.com/v4/letter/a/aeb1de/32.png) [@ArunaKannan](https://discuss.elastic.co/u/ArunaKannan)\
**Post date:** [April 28, 2020, 10:30pm UTC](https://discuss.elastic.co/t/encryption-at-rest-of-es-data-in-cloud/230263/1 "2020-04-28T22:30:02Z")

</div>

Hello All,

How do we encrypt ES data at rest on cloud. I read that dm-crypt is not for cloud solution. What are the options for hosting in cloud and what is the general industry standard for keeping logs and other data in ES in cloud?

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [April 28, 2020, 10:46pm UTC](https://discuss.elastic.co/t/encryption-at-rest-of-es-data-in-cloud/230263/2 "2020-04-28T22:46:25Z")

</div>

[https://www.elastic.co/guide/en/cloud/current/ec-faq.html#faq-encryption-at-rest](https://www.elastic.co/guide/en/cloud/current/ec-faq.html#faq-encryption-at-rest)

> **Does Elasticsearch Service support encryption at rest?**  
> Yes, encryption at rest (EAR) is enabled in Elasticsearch Service by default. We support EAR for both the data stored in your clusters and the snapshots we take for backup, on all cloud platforms and across all regions.

We don't currently support providing your own keys for this at the moment though sorry.

---

<div class="post-metadata">

**Author:** ![ArunaKannan](https://avatars.discourse-cdn.com/v4/letter/a/aeb1de/32.png) [@ArunaKannan](https://discuss.elastic.co/u/ArunaKannan)\
**Post date:** [April 29, 2020, 12:07am UTC](https://discuss.elastic.co/t/encryption-at-rest-of-es-data-in-cloud/230263/3 "2020-04-29T00:07:22Z")

</div>

Thanks for the response. We use Logstash to send data to ES. As EAR is enabled by default, does it mean I don't have to configure anything in Logstash or ES?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [May 27, 2020, 12:07am UTC](https://discuss.elastic.co/t/encryption-at-rest-of-es-data-in-cloud/230263/4 "2020-05-27T00:07:33Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.