Query: OpenSearch domains should have encryption at rest enabled

Description

This control checks whether AWS OpenSearch domains have encryption-at-rest configuration enabled. The check fails if encryption at rest is not enabled.

Query

Tables used in this query:

• aws_opensearch_domain

Controls using this query:

• 1 OpenSearch domains should have encryption at rest enabled
• OpenSearch domains should have encryption at rest enabled

SQL