Encryption At Rest
To protect data by Elastic Cloud Enterprise, encryption at rest must be configured with disk-level encryption (e.g., dm-crypt). Elastic Cloud Enterprise does not support encryption at rest out of the box. Instead, disk-level encryption (e.g., dm-crypt) must be manually configured on underlying hosts.
X-Pack Option for Encryption
Since native encryption at rest is not included, Elastic offers a paid solution through its X-Pack extension. X-Pack enables encryption beyond the disk layer and includes several other advanced security features.
Key benefits of X-Pack encryption:
- Encrypts data natively within Elasticsearch
- Provides secure, compliant protection for sensitive data
- Integrates with the broader X-Pack security feature set
Note: X-pack includes a 30-day free trial. After the trial ends, a Platinum license may be required to retain full functionality.