All checks

Medium Opensearch · regional

OpenSearch domains should encrypt data sent between nodes

Confirms that OpenSearch domains have node-to-node encryption enabled to protect data in transit within the cluster.

service: Opensearch
severity: Medium
scope: evaluated in every region

How to fix it

To enable node-to-node encryption for an OpenSearch domain, follow these steps:

Open the Amazon OpenSearch Service console at https://console.aws.amazon.com/opensearch/.
Choose the domain that you want to modify.
In the navigation pane, under Cluster configuration, choose Node-to-node encryption.
Select Enable for Node-to-node encryption.
Choose Save changes.

See which of your accounts this check is failing on.

Book a demo