Low
OpenSearch
Regional
OpenSearch domains should have at least three dedicated primary nodes
NIST 800-53
Description
This control checks whether an Amazon OpenSearch Service domain is configured with at least three dedicated primary (master) nodes. The control fails if the domain has fewer than three dedicated primary nodes.
Remediation
Increase the number of dedicated primary nodes to at least three for the domain.
Steps
- Open the Amazon OpenSearch Service console.
- Select the domain and choose 'Edit'.
- In 'Cluster configuration', enable dedicated master nodes if disabled.
- Set the dedicated master node count to 3 or more.
- Save changes and verify domain health.
Compliance
NIST 800-53