Connections to Elasticsearch domains should be encrypted using the latest TLS security policy

NIST

Description

Ensures connections to Elasticsearch domains use the latest TLS protocol for secure data transmission.

To enforce TLS encryption for connections to an Elasticsearch domain, follow these steps:

Open the Amazon Elasticsearch Service console at https://console.aws.amazon.com/es/.
Choose the domain that you want to modify.
In the navigation pane, under Domain configuration, choose Domain endpoint.
Select the latest TLS policy.
Choose Save changes.

NIST