AWS First Steps
LanguageEnglish
New feature

Amazon OpenSearch Service now supports index-level encryption

Amazon OpenSearch Service now supports index-level encryption, allowing each index to be encrypted with its own AWS KMS customer-managed key, enhancing data protection in multi-tenant environments

Amazon OpenSearch Service supports index-level encryption, allowing each index to be encrypted with its own AWS KMS customer-managed key. This enables different keys for different ownership or sensitive data within the same domain, such as encrypting each tenant's data with a unique key in multi-tenant applications. The feature builds on existing Amazon OpenSearch Service encryption and can be enabled by setting the encryption mode to Native and specifying a customer-managed AWS KMS key when creating a new domain via the AWS Management Console or AWS CLI. Additional keys can also be registered to the domain for use with individual indexes. It is available for domains running OpenSearch version 3.3 or later in 14 AWS regions, at no extra cost beyond standard AWS KMS and OpenSearch Service charges.

Why it matters

Amazon OpenSearch Service is a cloud-based search and analytics service. This update allows different encryption keys for each tenant or data owner, simplifying security and compliance management

Regions: N. Virginia, Ohio and 12 more

Read the original AWS announcement

Related articles and terms

AWS KMSA managed encryption key service for securely creating and managing keys used to encrypt dataAmazon OpenSearch ServiceA managed search and analytics service for easy log analysis and full-text searchWhere Are KMS Encryption Keys Stored? - How Envelope Encryption and HSMs WorkThis article explains how KMS master keys are stored inside FIPS 140-2 certified HSMs, how envelope encryption provides double protection for data keys, and the internal workings of key rotation.Practical Guide to Amazon OpenSearch Serverless - OCU Design and Optimization Strategies by Collection TypeAmazon OpenSearch Serverless is a fully managed service that handles search and analytics workloads with auto-scaling while eliminating cluster management. This article explains the OCU billing model, collection type selection criteria, and index design best practices from a practical perspective.Building a Log Analytics Platform with Amazon OpenSearch Service - Index Design and Dashboard ConstructionBuild a log analytics platform and optimize costs with index lifecycle management. Learn about OpenSearch Dashboards and Serverless mode.