turbot/aws_compliance
Loading controls...

Control: OpenSearch domains should use HTTPS

Description

This control checks whether connections to OpenSearch domains are using HTTPS. The rule is non-compliant if the OpenSearch domain 'EnforceHTTPS' is not 'true' or is 'true' and 'TLSSecurityPolicy' is not in 'tlsPolicies'.

Usage

Run the control in your terminal:

powerpipe control run aws_compliance.control.opensearch_domain_https_required

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run aws_compliance.control.opensearch_domain_https_required --share

SQL

This control uses a named query:

opensearch_domain_https_required

Tags