Medium
Opensearch
Regional
OpenSearch domains should have encryption at rest enabled
PCI DSSNISTISO 27001HIPAA
Description
This check ensures that OpenSearch domains have encryption at rest enabled to secure data against unauthorized access.
Remediation
To enable encryption at rest for an OpenSearch domain, follow these steps:
Steps
- Open the Amazon OpenSearch Service console at https://console.aws.amazon.com/opensearch/.
- Choose the domain that you want to modify.
- In the navigation pane, under Domain configuration, choose Encryption at rest.
- Select Enable for Encryption of data at rest.
- Choose Save changes.
Compliance
PCI DSSNISTISO 27001HIPAA