Loading controls...
Control: Elasticsearch domain should send logs to cloudWatch
Description
Ensure if Amazon OpenSearch Service (OpenSearch Service) domains are configured to send logs to Amazon CloudWatch Logs. The rule is complaint if a log is enabled for an OpenSearch Service domain. This rule is non complain if logging is not configured.
Usage
Run the control in your terminal:
steampipe check terraform_aws_compliance.control.es_domain_logs_to_cloudwatch
Snapshot and share results via Steampipe Cloud:
steampipe loginsteampipe check --share terraform_aws_compliance.control.es_domain_logs_to_cloudwatch
SQL
This control uses a named query:
es_domain_logs_to_cloudwatch