Amazon OpenSearch Service now supports index-level encryption

<p>Amazon OpenSearch Service now supports index-level encryption, letting you encrypt each index at rest with its own AWS Key Management Service (AWS KMS) customer managed key.&nbsp;This helps you protect data with different ownership or sensitivity under separate keys on the same domain. For example, you can encrypt each tenant's data with its own key in a multi-tenant application.</p> <p>Index-level encryption builds on the existing encryption at rest capability in Amazon OpenSearch Service. To enable it, set the encryption mode to Native and specify a customer managed AWS KMS key when you create a new domain using the AWS Management Console or the AWS CLI. You can then register additional keys with the domain and use them to encrypt individual indexes.</p> <p>Index-level encryption is available for domains running OpenSearch version 3.3 or later in 14 AWS Regions: US East (N. Virginia, Ohio), US West (Oregon), Canada (Central), Asia Pacific (Mumbai, Seoul, Singapore, Sydney, Tokyo), Europe (Frankfurt, Ireland, London, Paris), and South America (São Paulo).&nbsp;There is no additional charge for the feature. Standard AWS KMS and OpenSearch Service charges apply.</p> <p>To get started, see <a title=" Index-level encryption" href="https://docs.aws.amazon.com/opensearch-service/latest/developerguide/index-level-encryption.html" target="_blank">Index-level encryption</a> in the Amazon OpenSearch Service Developer Guide.</p>