Amazon OpenSearch Service now supports index-level encryption

This article announces index-level encryption support in Amazon OpenSearch Service, enabling encryption of individual indexes with separate AWS KMS customer managed keys.

• Encrypt each index with its own AWS KMS customer managed key on the same domain
• Ideal for multi-tenant applications where different tenants' data requires separate encryption keys
• Enable by setting encryption mode to Native and specifying a customer managed key during domain creation
• Available for OpenSearch version 3.3 or later in 14 AWS Regions globally
• No additional charge; standard AWS KMS and OpenSearch Service charges apply

Index-level encryption enhances data protection by allowing granular key management for different data ownership and sensitivity levels within a single OpenSearch domain.