Medium
Opensearch
Regional
OpenSearch domains should have audit logging enabled
NISTISO 27001
Description
This check ensures that OpenSearch domains have audit logging enabled to record and track changes to ensure security and compliance.
Remediation
To enable audit logging for an OpenSearch domain, follow these steps:
Steps
- Open the Amazon OpenSearch Service console at https://console.aws.amazon.com/opensearch/.
- Choose the domain that you want to modify.
- In the navigation pane, under Domain configuration, choose Audit logs.
- Select Enable for Audit logs.
- Choose Save changes.
Compliance
NISTISO 27001