Medium
Opensearch
Regional
Connections to OpenSearch domains should be encrypted using the latest TLS security policy
NISTISO 27001
Description
Ensures connections to OpenSearch domains use TLS for secure data transmission.
Remediation
To enforce TLS encryption for connections to an OpenSearch domain, follow these steps:
Steps
- Open the Amazon OpenSearch Service console at https://console.aws.amazon.com/opensearch/.
- Choose the domain that you want to modify.
- In the navigation pane, under Domain configuration, choose Domain endpoint.
- Select the latest TLS policy.
- Choose Save changes.
Compliance
NISTISO 27001