Query: OpenSearch domains should use HTTPS

Description

This control checks whether connections to OpenSearch domains are using HTTPS. The rule is non-compliant if the OpenSearch domain 'EnforceHTTPS' is not 'true' or is 'true' and 'TLSSecurityPolicy' is not in 'tlsPolicies'.

Query

Tables used in this query:

• aws_opensearch_domain

Controls using this query:

• 8 Connections to OpenSearch domains should be encrypted using TLS 1.2
• OpenSearch domains should use HTTPS

SQL