将Elasticsearch快照带到加密的S3存储桶

时间:2018-12-20 09:36:00

标签: amazon-web-services elasticsearch amazon-s3

我创建了一个S3存储桶,并将SSE-S3加密设置为默认值;

我在集群上创建了elasticsearch存储库

PUT _snapshot/es-s3-repo
{
  "type": "s3",
  "settings": {
    "bucket": "my_bucket",
    "compress": true
  }
}

然后开始放置索引

PUT /_snapshot/es-s3-repo/somedata
{
  "indices": "someindexpattern*",
  "ignore_unavailable": true,
  "include_global_state": false,
  "compress": true,
  "server_side_encryption": true
}


PUT /_snapshot/es-s3-repo/someotherdata
{
  "indices": "anotherindexpattern*",
  "ignore_unavailable": true,
  "include_global_state": false,
  "compress": true,
  "server_side_encryption": true
}

1 。我在存储区级别上都都启用了SSE-S3并使用设置server_side_encryption: true 的事实是否会产生任何副作用?

2 。恢复过程将通过

POST /_snapshot/es-s3-repo/someindexpattern*/_restore

动态执行解密,还是需要其他任何步骤?

3 。如果我在30天后应用了生命周期策略将数据移至S3-IA,这是否会在需要时影响快照恢复过程?

0 个答案:

没有答案