All checks
Medium
Elasticsearch domains should encrypt data sent between nodes
Ensures Elasticsearch domains have node-to-node encryption enabled, securing data in transit within the cluster.
- service
- Elasticsearch
- severity
- Medium
- scope
- evaluated in every region
How to fix it
To enable node-to-node encryption for an Elasticsearch domain, follow these steps:
- Open the Amazon Elasticsearch Service console at https://console.aws.amazon.com/es/.
- Choose the domain that you want to modify.
- In the navigation pane, under Domain configuration, choose Node-to-node encryption.
- Select Enable for Node-to-node encryption.
- Choose Save changes.
See which of your accounts this check is failing on.
Book a demo