All checks

Medium Opensearch · regional

Connections to OpenSearch domains should be encrypted using the latest TLS security policy

Ensures connections to OpenSearch domains use TLS for secure data transmission.

service: Opensearch
severity: Medium
scope: evaluated in every region

How to fix it

To enforce TLS encryption for connections to an OpenSearch domain, follow these steps:

Open the Amazon OpenSearch Service console at https://console.aws.amazon.com/opensearch/.
Choose the domain that you want to modify.
In the navigation pane, under Domain configuration, choose Domain endpoint.
Select the latest TLS policy.
Choose Save changes.

See which of your accounts this check is failing on.

Book a demo