Medium Elasticsearch Regional

Elasticsearch domains should have audit logging enabled

NIST

Description

This check ensures that Elasticsearch domains have audit logging enabled, which is crucial for security and compliance auditing.

To enable audit logging for an Elasticsearch domain, follow these steps:

Open the Amazon Elasticsearch Service console at https://console.aws.amazon.com/es/.
Choose the domain that you want to modify.
In the navigation pane, under Domain configuration, choose Audit logs.
Select Enable for Audit logs.
Choose Save changes.

NIST