High
Opensearch
Regional
OpenSearch domains should have fine-grained access control enabled
NISTISO 27001HIPAA
Description
This check ensures that OpenSearch domains have fine-grained access control enabled to provide secure access to the domain's data and configurations.
Remediation
To enable fine-grained access control for an OpenSearch domain, follow these steps:
Steps
- Open the Amazon OpenSearch Service console at https://console.aws.amazon.com/opensearch/.
- Choose the domain that you want to modify.
- In the navigation pane, under Domain configuration, choose Advanced security.
- Select Enable for Fine-grained access control.
- Choose Save changes.
Compliance
NISTISO 27001HIPAA