All checks

Medium Opensearch · regional

OpenSearch domains should have encryption at rest enabled

Verifies that OpenSearch domains have encryption at rest enabled.

service: Opensearch
severity: Medium
scope: evaluated in every region

How to fix it

To enable encryption at rest for an OpenSearch domain, follow these steps:

Open the Amazon OpenSearch Service console at https://console.aws.amazon.com/opensearch/.
Choose the domain that you want to modify.
In the navigation pane, under Domain configuration, choose Encryption at rest.
Select Enable for Encryption of data at rest.
Choose Save changes.

See which of your accounts this check is failing on.

Book a demo