search

aws / aws-cli

Universal Command Line Interface for Amazon Web Services
Other
15.53k stars 4.13k forks source link

awscli call not returning EncryptionAtRest metadata - ES and Elasticache #3122

Closed arvinddoraiswamy closed 6 years ago

arvinddoraiswamy commented 6 years ago

Hi, I have an Elastic Search domain configured with EncryptionAtRest. Running the awscli command to retrieve this however, fails. As in, it doesn't show me that the ES domain was actually encrypted as stated here - https://docs.aws.amazon.com/cli/latest/reference/es/describe-elasticsearch-domain-config.html.

The command itself is pretty simple: aws es describe-elasticsearch-domain-config --region us-west-2 --domain-name boo --region us-west-2

I have a similar issue with elasticache where the console says the DB is encrypted but the describe call does not return the relevant information.

*aws elasticache describe-replication-groups --region us-west-2 --replication-group-id --query 'ReplicationGroups[].[AtRestEncryptionEnabled,TransitEncryptionEnabled]'**

What am I doing wrong? I'm posting to this forum only because the console for both services show me correct info - just not getting it back with awscli.

Thanks Arvind

arvinddoraiswamy commented 6 years ago

Ugh. Never mind - I hadn't upgraded awscli so it was using an older model :/. Apologies for the spam.