turbot/terraform_aws_compliance

GitHub
Loading controls...

Control: Elasticsearch domain should send logs to cloudWatch

Description

Ensure if Amazon OpenSearch Service (OpenSearch Service) domains are configured to send logs to Amazon CloudWatch Logs. The rule is complaint if a log is enabled for an OpenSearch Service domain. This rule is non complain if logging is not configured.

Usage

Run the control in your terminal:

steampipe check terraform_aws_compliance.control.es_domain_logs_to_cloudwatch

Snapshot and share results via Steampipe Cloud:

steampipe login
steampipe check --share terraform_aws_compliance.control.es_domain_logs_to_cloudwatch

SQL

This control uses a named query:

es_domain_logs_to_cloudwatch

Tags