Control: Elasticsearch domains should have cognito authentication enabled
Description
AWS Elasticsearch service uses AWS Cognito to offer user name and password protection for Kibana. This control is non-compliant if AWS Cognito authentication is not enabled.
Usage
Run the control in your terminal:
powerpipe control run aws_compliance.control.es_domain_cognito_authentication_enabledSnapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run aws_compliance.control.es_domain_cognito_authentication_enabled --shareSQL
This control uses a named query:
es_domain_cognito_authentication_enabled