Control: 1 Elasticsearch domains should have encryption at-rest enabled
This control checks whether Amazon ES domains have encryption at rest configuration enabled.
By default, domains do not encrypt data at rest, and you cannot configure existing domains to use the feature.
To enable the feature, you must create another domain and migrate your data. For information about creating domains, see the Amazon Elasticsearch Service Developer Guide.
Encryption of data at rest requires Amazon ES 5.1 or later. For more information about encrypting data at rest for Amazon ES, see the Amazon Elasticsearch Service Developer Guide.
steampipe check aws_compliance.control.foundational_security_es_1
This control uses a named query:es_domain_encryption_at_rest_enabled