Elasticsearch domains should have audit logging enabled

NIST

Description

Confirms that Elasticsearch domains have audit logging enabled for security and compliance purposes.

To enable audit logging for an Elasticsearch domain, follow these steps:

Open the Amazon Elasticsearch Service console at https://console.aws.amazon.com/es/.
Choose the domain that you want to modify.
In the navigation pane, under Domain configuration, choose Audit logs.
Select Enable for Audit logs.
Choose Save changes.

NIST