Skip to content

Conversation

@dmitry-pisarev-writerai

Description

This change depends on elastic/cloud-sdk-go#502

Adding byok_arn argument for ec_deployment resource to enable deployment creation encrypted with CMK.

Related Issues

#827

Motivation and Context

Need to create an elasticsearch deployment with help of Terraform, and have this deployment encrypted with a customer key (e.g. AWS KMS).

How Has This Been Tested?

With custom build of terraform-provider-ec able to create hosted elasticsearch deployment encrypted with our own AWS KMS key.

resource "ec_deployment" "this" {
  name = var.name

  region                     = var.region
  version                    = local.version
  deployment_template_id     = var.deployment_template_id
  migrate_to_latest_hardware = true
  byok_arn                   = var.byok_arn
...

Types of Changes

  • Bug fix (non-breaking change which fixes an issue)
  • New feature (non-breaking change which adds functionality)
  • Refactoring (improves code quality but has no user-facing effect)
  • Breaking change (fix or feature that would cause existing functionality to change)
  • Documentation

Readiness Checklist

  • My code follows the code style of this project
  • My change requires a change to the documentation
  • I have updated the documentation accordingly
  • I have added tests to cover my changes
  • All new and existing tests passed

@dmitry-pisarev-writerai dmitry-pisarev-writerai requested a review from a team as a code owner July 16, 2025 15:45
@cla-checker-service
Copy link

❌ Author of the following commits did not sign a Contributor Agreement:
6739277

Please, read and sign the above mentioned agreement if you want to contribute to this project

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant