All checks
Medium Elasticsearch · regional

Elasticsearch domains should encrypt data sent between nodes

Ensures Elasticsearch domains have node-to-node encryption enabled, securing data in transit within the cluster.

service
Elasticsearch
severity
Medium
scope
evaluated in every region

How to fix it

To enable node-to-node encryption for an Elasticsearch domain, follow these steps:

  1. Open the Amazon Elasticsearch Service console at https://console.aws.amazon.com/es/.
  2. Choose the domain that you want to modify.
  3. In the navigation pane, under Domain configuration, choose Node-to-node encryption.
  4. Select Enable for Node-to-node encryption.
  5. Choose Save changes.

See which of your accounts this check is failing on.

Book a demo