Medium Opensearch Regional

OpenSearch domains should have encryption at rest enabled

PCI DSSNISTISO 27001HIPAA

Description

Verifies that OpenSearch domains have encryption at rest enabled.


Remediation

To enable encryption at rest for an OpenSearch domain, follow these steps:

Steps

  1. Open the Amazon OpenSearch Service console at https://console.aws.amazon.com/opensearch/.
  2. Choose the domain that you want to modify.
  3. In the navigation pane, under Domain configuration, choose Encryption at rest.
  4. Select Enable for Encryption of data at rest.
  5. Choose Save changes.

Compliance

PCI DSSNISTISO 27001HIPAA