AWS OpenSearch Terraform module
Upstream version 2.11.1
6 controls from NIST SP 800-171 Rev 2 requirements
Terraform Module Source
nist800171.compliance.tf/terraform-aws-modules/opensearch/awsCloudWatch log groups should have retention period of at least 365 days
cloudwatch_log_group_retention_period_3653.3.1
Framework requirement
Log groups should have encryption at rest enabled
log_group_encryption_at_rest_enabled3.3.8
Framework requirement
OpenSearch domains should have encryption at rest enabled
opensearch_domain_encryption_at_rest_enabled3.13.11
Framework requirement
OpenSearch domains should be in a VPC
opensearch_domain_in_vpc
Framework requirement
OpenSearch domains node-to-node encryption should be enabled
opensearch_domain_node_to_node_encryption_enabled3.5.10
Framework requirement
VPC Security groups should only allow unrestricted incoming traffic for authorized ports
vpc_security_group_allows_ingress_authorized_ports3.13.1
Framework requirement