More
AWS Foundational Security Best Practice
Elasticsearch domains should have at least three data nodes
This control checks whether Elasticsearch domains are configured with at least three data nodes and zoneAwarenessEnabled is true.