Control: Elasticsearch domain should send logs to cloudWatch
Ensure if Amazon OpenSearch Service (OpenSearch Service) domains are configured to send logs to Amazon CloudWatch Logs. The rule is complaint if a log is enabled for an OpenSearch Service domain. This rule is non complain if logging is not configured.
Run the control in your terminal:
steampipe check terraform_aws_compliance.control.es_domain_logs_to_cloudwatch
Snapshot and share results via Steampipe Cloud:
steampipe loginsteampipe check --share terraform_aws_compliance.control.es_domain_logs_to_cloudwatch
This control uses a named query:es_domain_logs_to_cloudwatch