top of page

ES.8

Connections to Elasticsearch domains should be encrypted using TLS 1.2

Severity

Cloud Platforms

Resources

Related Standards

Automated

MEDIUM

AWS

Amazon Elasticsearch

AWS Foundational Best Practice, NIST.800-53.r5,

This control checks whether connections to Elasticsearch domains are required to use TLS 1.2. The check fails if the Elasticsearch domain TLSSecurityPolicy is not Policy-Min-TLS-1-2-2019-07.

bottom of page