OpenSearch domain should enforce HTTPS with a modern TLS policy

What it checks

OpenSearch domain should enforce HTTPS with a modern TLS policy

Where it applies

Terraform: aws_opensearch_domain, aws_elasticsearch_domain

CloudFormation: AWS::OpenSearchService::Domain, AWS::Elasticsearch::Domain

How to fix it

1. Set domain_endpoint_options { enforce_https = true tls_security_policy = "Policy-Min-TLS-1-2-2019-07" }

Frameworks

• AWS FSBP Opensearch.8
• SOC 2 CC6.7
• HIPAA 164.312(e)(1)

These mappings are advisory, not an attestation of compliance.

Vendor documentation

All rules