AWS OpenSearch Terraform module

Upstream version 2.9.0
10 controls from PCI DSS v4.0 requirements

Terraform Module Source

pcidssv40.compliance.tf/terraform-aws-modules/opensearch/aws
ComplianceInputsOutputsResourcesDiff (0)README
Log group retention period should be at least 365 days
cloudwatch_log_group_retention_period_365
Framework requirement
Log group encryption at rest should be enabled
log_group_encryption_at_rest_enabled
Framework requirement
OpenSearch domains should have audit logging enabled.
opensearch_domain_audit_logging_enabled
Framework requirement
OpenSearch domains should have encryption at rest enabled
opensearch_domain_encryption_at_rest_enabled
Framework requirement
OpenSearch domains should have fine-grained access control enabled
opensearch_domain_fine_grained_access_enabled
Framework requirement
OpenSearch domains should use HTTPS
opensearch_domain_https_required
Framework requirement
OpenSearch domains should be in a VPC
opensearch_domain_in_vpc
Framework requirement
OpenSearch domains logs to AWS CloudWatch Logs
opensearch_domain_logs_to_cloudwatch
Framework requirement
OpenSearch domains node-to-node encryption should be enabled
opensearch_domain_node_to_node_encryption_enabled
Framework requirement
VPC Security groups should only allow unrestricted incoming traffic for authorized ports
vpc_security_group_allows_ingress_authorized_ports1.3.2
Framework requirement