Data Encryption in AWS Elasticsearch
Question
Marqueguard is a social media monitoring company headquartered in Brighton, England.
Marqueguard sells three different products: Analytics, Audiences, and Insights.
Marqueguard Analytics is a "self-serve application" or software as a service, which archives social media data in order to provide companies with information and the means to track specific segments to analyze their brands' online presence.
The tool's coverage includes blogs, news sites, forums, videos, reviews, images and social networks such as Twitter and Facebook.
Users can search data by using Text and Image Search, and use charting, categorization, sentiment analysis and other features to provide further information and analysis.
Marqueguard has access to over 80 million sources.
Marqueguard is using Elasticsearch to address use cases related to search and analytics engine such as log analytics, real-time application monitoring, and clickstream analysis.
Marqueguard enables encryption of data at rest, a security feature that helps prevent unauthorized access to your data.
When encryption of data is enabled, what all aspects of domain are encrypted? Select 3 options.
Answers
Explanations
Click on the arrows to vote for the correct answer
A. B. C. D. E.Answer: A,B,D.
Amazon ES domains offer encryption of data at rest, a security feature that helps prevent unauthorized access to your data.
The feature uses AWS Key Management Service (AWS KMS) to store and manage your encryption keys.
If enabled, it encrypts the following aspects of a domain:
Indices.
Automated snapshots.
Elasticsearch logs.
Swap files.
All other data in the application directory The following are not encrypted when you enable encryption of data at rest, but you can take additional steps to protect them:
Manual snapshots.
Slow logs and error logs.
https://docs.aws.amazon.com/elasticsearch-service/latest/developerguide/aes-bp.htmlWhen encryption of data at rest is enabled in Elasticsearch domain, the following aspects of the domain are encrypted:
Automated snapshots: Elasticsearch provides the ability to take automated snapshots of a domain. These snapshots can be used to restore data in case of data loss or corruption. When encryption of data at rest is enabled, the automated snapshots taken by Elasticsearch are encrypted. This ensures that the data in the snapshot is secure and cannot be accessed by unauthorized users.
Elasticsearch logs: Elasticsearch generates logs that provide information about the health and performance of the domain. These logs can be used for troubleshooting and monitoring. When encryption of data at rest is enabled, the Elasticsearch logs are also encrypted. This ensures that sensitive information in the logs cannot be accessed by unauthorized users.
Manual snapshots: In addition to automated snapshots, Elasticsearch also allows users to take manual snapshots of a domain. These snapshots can be used to create a backup of the data in the domain. When encryption of data at rest is enabled, the manual snapshots taken by users are also encrypted. This ensures that the backup data is secure and cannot be accessed by unauthorized users.
The following options are not encrypted when encryption of data at rest is enabled:
Swap files: Swap files are temporary storage files used by the operating system when the domain runs out of memory. These files are not encrypted when encryption of data at rest is enabled.
Slow logs and error logs: Slow logs and error logs are generated by Elasticsearch to provide information about slow or failed queries. These logs are not encrypted when encryption of data at rest is enabled.
In summary, when encryption of data at rest is enabled in Elasticsearch domain, automated snapshots, Elasticsearch logs, and manual snapshots are encrypted, while swap files, slow logs, and error logs are not encrypted.
