adding node-to-node encryption

uc-cdis · Dec 18, 2023 · 45de46d · 45de46d
1 parent a6340ec
commit 45de46d
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/gen3/bin/create-es7-cluster.sh b/gen3/bin/create-es7-cluster.sh
@@ -40,6 +40,7 @@ else
     --vpc-options "SubnetIds=${subnet_ids[*]},SecurityGroupIds=${security_groups[*]}" \
     --access-policies "$access_policies" \
     --encryption-at-rest-options "Enabled=true,KmsKeyId=$kms_key_id"\
+    --node-to-node-encryption-options "Enabled=true"
     > /dev/null 2>&1
 
     # Wait for the new cluster to be available
@@ -60,4 +61,4 @@ else
     if [ $retry_count -eq $max_retries ]; then
     echo "New cluster creation may still be in progress. Please check the AWS Management Console for the status."
     fi
-fi
+fi