Query: Connections to Elasticsearch domains should be encrypted using TLS 1.2

Description

This control checks whether connections to Elasticsearch domains are required to use TLS 1.2. The check fails if the Elasticsearch domain TLSSecurityPolicy is not Policy-Min-TLS-1-2-2019-07.

Query

Tables used in this query:

• aws_elasticsearch_domain

Controls using this query:

• 8 Connections to Elasticsearch domains should be encrypted using TLS 1.2
• Connections to Elasticsearch domains should be encrypted using TLS 1.2

SQL