opensearch-node-to-node-encryption-check
Check if Amazon OpenSearch Service nodes are encrypted end to end. The rule is NON_COMPLIANT if the node-to-node encryption is not enabled on the domain
Note
The rule does not evaluate Elasticsearch domains.
Identifier: OPENSEARCH_NODE_TO_NODE_ENCRYPTION_CHECK
Resource Types: AWS::OpenSearch::Domain
Trigger type: Configuration changes
AWS Region: All supported AWS regions except US ISO West, China (Beijing), US ISO East, Middle East (UAE), Asia Pacific (Hyderabad), Asia Pacific (Malaysia), US ISOB East, Asia Pacific (Melbourne), AWS GovCloud (US-East), AWS GovCloud (US-West), Israel (Tel Aviv), Canada West (Calgary), Europe (Spain), China (Ningxia), Europe (Zurich) Region
Parameters:
- None
AWS CloudFormation template
To create AWS Config managed rules with AWS CloudFormation templates, see Creating AWS Config Managed Rules With AWS CloudFormation Templates.
