title: How to properly encrypt Elasticsearch instance with KMS
body: <p>I will use my Rails/Mysql/Elasticsearch for processing some sensitive data, so I want to encrypt my data at rest. </p>
  
  <p>It is clear to me that I can use AWS KMS to <a href="http://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Overview.Encryption.html" rel="noreferrer">encrypt data in Mysql</a>. It's important for me that this encryption is transparent for my application.</p>
  
  <p>But now I'm concerned about indexes and data gathered by Elasticsearch. Is there a similar way to transparently encrypt data there?</p>
  
  <p>I am interested in solutions both for Elasticsearch-as-an-application as well as <a href="http://docs.aws.amazon.com/elasticsearch-service/latest/developerguide/what-is-amazon-elasticsearch-service.html" rel="noreferrer">AWS Elasticsearch-as-service</a> as I have not decided what I'll be using. </p>