Aqua CSPM

ElasticSearch Public Service Domain

Quick Info

Plugin TitleElasticSearch Public Service Domain
CloudAWS
CategoryES
DescriptionEnsures ElasticSearch domains are created with private VPC endpoint options
More InfoElasticSearch domains can either be created with a public endpoint or with a VPC configuration that enables internal VPC communication. Domains should be created without a public endpoint to prevent potential public access to the domain.
AWS Linkhttps://docs.aws.amazon.com/elasticsearch-service/latest/developerguide/es-vpc.html
Recommended ActionConfigure the ElasticSearch domain to use a VPC endpoint for secure VPC communication.

Detailed Remediation Steps