turbot/terraform_aws_compliance
Loading controls...

Control: Elasticsearch domain should send logs to cloudWatch

Description

Ensure if Amazon OpenSearch Service (OpenSearch Service) domains are configured to send logs to Amazon CloudWatch Logs. The rule is complaint if a log is enabled for an OpenSearch Service domain. This rule is non complain if logging is not configured.

Usage

Run the control in your terminal:

powerpipe control run terraform_aws_compliance.control.es_domain_logs_to_cloudwatch

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run terraform_aws_compliance.control.es_domain_logs_to_cloudwatch --share

SQL

This control uses a named query:

es_domain_logs_to_cloudwatch

Tags