ElasticSearch Exposed Domain

Quick Info


Plugin Title	ElasticSearch Exposed Domain
Cloud	AWS
Category	ES
Description	Ensures ElasticSearch domains are not publicly exposed to all AWS accounts
More Info	ElasticSearch domains should not be publicly exposed to all AWS accounts.
AWS Link	https://aws.amazon.com/blogs/database/set-access-control-for-amazon-elasticsearch-service/
Recommended Action	Update elasticsearch domain to set access control.

Detailed Remediation Steps

Cloud Security Posture Management (CSPM)

Scan, monitor and remediate configuration issues in public cloud accounts according to best practices and compliance standards, across AWS, Azure, Google Cloud, and Oracle Cloud.

Cloud native security as-a-service

Aqua Wave

Get Started

Aqua Container Security

Aqua Security is the largest pure-play cloud native security company, providing customers the freedom to innovate and run their businesses with minimal friction. The Aqua Cloud Native Security Platform provides prevention, detection, and response automation across the entire application lifecycle to secure the build, secure cloud infrastructure and secure running workloads wherever they are deployed.