aws-elastic-service-enable-domain-encryption.md

Pattern: Disabled domain encryption for AWS Elasticsearch

Issue: -

Description

You should ensure your Elasticsearch data is encrypted at rest to help prevent sensitive information from being read by unauthorized users.

Resolution: Enable Elasticsearch domain encryption.

Examples

Example of incorrect code:

resource "aws_elasticsearch_domain" "bad_example" {
  domain_name = "domain-foo"

  encrypt_at_rest {
    enabled = false
  }
}

Example of correct code:

resource "aws_elasticsearch_domain" "good_example" {
  domain_name = "domain-foo"

  encrypt_at_rest {
    enabled = true
  }
}