Medium Opensearch Regional

OpenSearch domains should have audit logging enabled

NISTISO 27001

Description

This check ensures that OpenSearch domains have audit logging enabled to record and track changes to ensure security and compliance.


Remediation

To enable audit logging for an OpenSearch domain, follow these steps:

Steps

  1. Open the Amazon OpenSearch Service console at https://console.aws.amazon.com/opensearch/.
  2. Choose the domain that you want to modify.
  3. In the navigation pane, under Domain configuration, choose Audit logs.
  4. Select Enable for Audit logs.
  5. Choose Save changes.

Compliance

NISTISO 27001