import { Value } from '../../../cloudformation/Value';
/**
  Whether the domain should encrypt data at rest, and if so, the AWS Key Management Service key to use.
  For full documentation go to <a href="http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-opensearchservice-domain-encryptionatrestoptions.html">the AWS Docs</a>
*/
export interface EncryptionAtRestOptionsProps {
    /** <code>KmsKeyId</code>  <a name="cfn-opensearchservice-domain-encryptionatrestoptions-kmskeyid"></a>
  The KMS key ID. Takes the form <code>1a2a3a4-1a2a-3a4a-5a6a-1a2a3a4a5a6a</code>. Required if you enable encryption at rest.<br />
  You can also use <code>keyAlias</code> as a value.<br />
  
  Required: Conditional<br />
  
  Minimum: <code>1</code><br />
  
  Maximum: <code>500</code><br />
  
  Pattern: <code>.*</code><br />
  
  Update requires: <a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt">No interruption</a> */
    kmsKeyId?: Value<string>;
    /** <code>Enabled</code>  <a name="cfn-opensearchservice-domain-encryptionatrestoptions-enabled"></a>
  Specify <code>true</code> to enable encryption at rest. Required if you enable fine-grained access control in <a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-opensearchservice-domain-advancedsecurityoptionsinput.html">AdvancedSecurityOptionsInput</a>.<br />
  
  Required: Conditional<br />
  
  Update requires: <a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt">No interruption</a> */
    enabled?: Value<boolean>;
}
