Query: OpenSearch domains logs to AWS CloudWatch Logs

Description

This control checks whether AWS OpenSearch Service domains are configured to send logs to CloudWatch logs. The rule is non-compliant if logging is not configured.

Query

Tables used in this query:

• aws_opensearch_domain

Controls using this query:

• 4 OpenSearch domain error logging to CloudWatch Logs should be enabled
• OpenSearch domains logs to AWS CloudWatch Logs

SQL