Query: OpenSearch domains should use the latest TLS security policy

Description

This control checks whether an OpenSearch domain endpoint enforces HTTPS and uses the latest TLS security policy. The control fails if HTTPS is not enforced or the TLS security policy is not one of the latest policies.

Query

Tables used in this query:

• aws_opensearch_domain

Controls using this query:

• 8 Connections to OpenSearch domains should be encrypted using the latest TLS security policy
• OpenSearch domains should use the latest TLS security policy

SQL