Opensearch.1

OpenSearch domains should have encryption at rest enabled

Severity

Cloud Platforms

Resources

Related Standards

Automated

MEDIUM

AWS

Amazon OpenSearch

AWS Foundational Best Practice, CIS v8, PCI DSS v3.2.1, NIST CSF, NIST.800-53.r5,

This control checks whether Amazon OpenSearch domains have encryption-at-rest configuration enabled. The check fails if encryption at rest is not enabled.