AWS OpenSearch Terraform module
Upstream version 2.11.1
6 controls from NIST Cybersecurity Framework v2.0 requirements
Terraform Module Source
nistcsf.compliance.tf/terraform-aws-modules/opensearch/awsCloudWatch log groups should have retention period of at least 365 days
cloudwatch_log_group_retention_period_365RC.RP-06
Framework requirement
Elasticsearch domain error logging to CloudWatch Logs should be enabled
es_domain_error_logging_enabledPR.PS-04
Framework requirement
Log groups should have encryption at rest enabled
log_group_encryption_at_rest_enabledPR.DS-1
Framework requirement
OpenSearch domains should have encryption at rest enabled
opensearch_domain_encryption_at_rest_enabledID.BE-5
Framework requirement
OpenSearch domains should use HTTPS
opensearch_domain_https_requiredPR.DS-2
Framework requirement
OpenSearch domains node-to-node encryption should be enabled
opensearch_domain_node_to_node_encryption_enabledPR.DS-1
Framework requirement