Low
OpenSearch
Regional
OpenSearch domains should have the latest software update installed
NIST 800-53PCI DSS v4.0.1PCI DSS v6.3.3
Description
This control checks whether an Amazon OpenSearch Service domain has the latest software update installed. The control fails if a software update is available but not installed for the domain.
Remediation
Install the latest OpenSearch service software update for the domain.
Steps
- Open the Amazon OpenSearch Service console.
- Select the target domain and choose 'Actions' > 'Service software updates'.
- Start the update during a low-traffic window.
- Wait for the update status to show COMPLETED and verify domain health.
Compliance
NIST 800-53PCI DSS v4.0.1PCI DSS v6.3.3