Query: Elasticsearch domain should be encrypted with KMS CMK

Description

This control checks whether Elasticsearch domains are configured to use KMS CMK for encryption at rest. This control fails if the Elasticsearch domain does not use KMS CMK for encryption at rest.

Query

Tables used in this query:

• terraform_resource

Controls using this query:

• Elasticsearch domain should be encrypted with KMS CMK

SQL