AWS > OpenSearch >

OpenSearch Encrypted Domain

HIGH

Source

CloudSploit

opensearch-encrypted-domain

management console

OpenSearch Encrypted Domain

Ensures OpenSearch domains are encrypted with KMS

OpenSearch domains should be encrypted to ensure data at rest is secured.

Recommended Actions

Ensure encryption-at-rest is enabled for all OpenSearch domains.

Links

https://docs.aws.amazon.com/opensearch-service/latest/developerguide/encryption-at-rest.html

Aqua Container Security

Aqua Security is the largest pure-play cloud native security company, providing customers the freedom to innovate and run their businesses with minimal friction. The Aqua Cloud Native Security Platform provides prevention, detection, and response automation across the entire application lifecycle to secure the build, secure cloud infrastructure and secure running workloads wherever they are deployed.