Elasticsearch domain endpoint is using outdated TLS policy.
You should not use outdated/insecure TLS versions for encryption. You should be using TLS v1.2+.
Impact
Recommended Actions
Follow the appropriate remediation steps below to resolve the issue.
Use the most modern TLS/SSL policies available
1
2
3
4
5
6
|
Resources:
GoodExample:
Type: AWS::Elasticsearch::Domain
Properties:
DomainEndpointOptions:
TLSSecurityPolicy: Policy-Min-TLS-1-2-2019-07
|
Use the most modern TLS/SSL policies available
1
2
3
4
5
6
|
resource "aws_elasticsearch_domain" "good_example" {
domain_endpoint_options {
enforce_https = true
tls_security_policy = "Policy-Min-TLS-1-2-2019-07"
}
}
|
Links