Ensure that the Kendra index is encrypted using desired encryption level.
Amazon Kendra encrypts your data at rest with AWS-manager keys by default. Use customer-managed keys instead in order to gain more granular control over encryption/decryption process.
Create Kendra Index with customer-manager keys (CMKs).