Query: Elasticsearch domain should send logs to CloudWatch

Description

Ensure that AWS OpenSearch Service (OpenSearch Service) domains are configured to send logs to AWS CloudWatch Logs. The rule is compliant if a log is enabled for an OpenSearch Service domain. This rule is non-compliant if logging is not configured.

Query

Tables used in this query:

• aws_elasticsearch_domain

Controls using this query:

• Elasticsearch domain should send logs to CloudWatch

SQL