All checks
Critical
OpenSearch domains should not be publicly accessible
Confirms that OpenSearch domains are deployed within a VPC rather than exposed to the public internet, so only clients inside your network can reach the search data.
- service
- Opensearch
- severity
- Critical
- scope
- evaluated in every region
How to fix it
In the console
OpenSearch Service → Domains → Create domain → Network
With Terraform
resource "aws_opensearch_domain" "this" {
domain_name = var.domain_name
vpc_options {
subnet_ids = var.subnet_ids
security_group_ids = var.security_group_ids
}
}See which of your accounts this check is failing on.
Book a demo