Query: OpenSearch domains should use HTTPS

Description

This control checks whether connections to OpenSearch domains are using HTTPS. The rule is non-compliant if the OpenSearch domain 'EnforceHTTPS' is not 'true' or its 'TLSSecurityPolicy' allows TLS versions below 1.2.

Query

Tables used in this query:

• aws_opensearch_domain

Controls using this query:

• OpenSearch domains should use HTTPS

SQL