All checks

Medium Opensearch · regional

OpenSearch domains should have audit logging enabled

Ensures OpenSearch domains have audit logging enabled to record and track changes for security and compliance.

service: Opensearch
severity: Medium
scope: evaluated in every region

How to fix it

To enable audit logging for an OpenSearch domain, follow these steps:

Open the Amazon OpenSearch Service console at https://console.aws.amazon.com/opensearch/.
Choose the domain that you want to modify.
In the navigation pane, under Domain configuration, choose Audit logs.
Select Enable for Audit logs.
Choose Save changes.

See which of your accounts this check is failing on.

Book a demo