Medium Opensearch Regional

OpenSearch domains should have encryption at rest enabled

PCI DSSNISTISO 27001HIPAA

Description

This check ensures that OpenSearch domains have encryption at rest enabled to secure data against unauthorized access.


Remediation

To enable encryption at rest for an OpenSearch domain, follow these steps:

Steps

  1. Open the Amazon OpenSearch Service console at https://console.aws.amazon.com/opensearch/.
  2. Choose the domain that you want to modify.
  3. In the navigation pane, under Domain configuration, choose Encryption at rest.
  4. Select Enable for Encryption of data at rest.
  5. Choose Save changes.

Compliance

PCI DSSNISTISO 27001HIPAA