AWS OpenSearch Terraform module
Upstream version 2.11.1
11 controls from AWS Well-Architected Framework v10 requirements
Terraform Module Source
awswellarchitected.compliance.tf/terraform-aws-modules/opensearch/awsCloudWatch log groups should have retention period of at least 365 days
cloudwatch_log_group_retention_period_365
Framework requirement
Log groups should have encryption at rest enabled
log_group_encryption_at_rest_enabled
Framework requirement
OpenSearch domains should have audit logging enabled
opensearch_domain_audit_logging_enabled
Framework requirement
OpenSearch domains should have Cognito authentication enabled for Kibana
opensearch_domain_cognito_authentication_enabled_for_kibana
Framework requirement
OpenSearch domains should have encryption at rest enabled
opensearch_domain_encryption_at_rest_enabled
Framework requirement
OpenSearch domains should use HTTPS
opensearch_domain_https_required
Framework requirement
OpenSearch domains should be in a VPC
opensearch_domain_in_vpc
Framework requirement
OpenSearch domains internal user database should be disabled
opensearch_domain_internal_user_database_disabled
Framework requirement
OpenSearch domains should have logging to CloudWatch Logs enabled
opensearch_domain_logs_to_cloudwatch
Framework requirement
OpenSearch domains node-to-node encryption should be enabled
opensearch_domain_node_to_node_encryption_enabled
Framework requirement
VPC security groups should restrict ingress from 0.0.0.0/0 or ::/0 to cassandra ports 7199 or 9160 or 8888
vpc_security_group_allows_ingress_to_cassandra_ports
Framework requirement