Query: OpenSearch domains should have fine-grained access control enabled

Description

This control checks whether OpenSearch domains have fine-grained access control enabled. The control fails if the fine-grained access control is not enabled. Fine-grained access control requires advanced-security-optionsin the OpenSearch parameter update-domain-config to be enabled.

Query

Tables used in this query:

• aws_opensearch_domain

Controls using this query:

• 7 OpenSearch domains should have fine-grained access control enabled
• OpenSearch domains should have fine-grained access control enabled

SQL