top of page
< Back

AWS Foundational Security Best Practice

Opensearch.4

OpenSearch domain error logging to CloudWatch Logs should be enabled

Severity

Cloud Platforms

Resources

MEDIUM

AWS

Amazon OpenSearch

This control checks whether Amazon OpenSearch domains are configured to send error logs to CloudWatch Logs. This control fails if error logging to CloudWatch is not enabled for a domain.

bottom of page