Skip to content

Files

Latest commit

 

History

History
35 lines (24 loc) · 661 Bytes

AWS032.md

File metadata and controls

35 lines (24 loc) · 661 Bytes

Pattern: Elasticsearch domain uses plaintext traffic for node to node communication

Issue: -

Description

Traffic flowing between Elasticsearch nodes should be encrypted to ensure sensitive data is kept private.

Resolution: Enable encrypted node to node communication.

Examples

Example of incorrect code:

resource "aws_elasticsearch_domain" "bad_example" {
  domain_name = "domain-foo"

  node_to_node_encryption {
    enabled = false
  }
}

Example of correct code:

resource "aws_elasticsearch_domain" "good_example" {
  domain_name = "domain-foo"

  node_to_node_encryption {
    enabled = true
  }
}