Control: Elasticsearch domains should be configured with at least three dedicated master nodes
Description
This control checks whether Elasticsearch domains are configured with at least three dedicated master nodes. This control fails if the domain does not use dedicated master nodes. This control passes if Elasticsearch domains have five dedicated master nodes. However, using more than three master nodes might be unnecessary to mitigate the availability risk, and will result in additional cost.
Usage
Run the control in your terminal:
powerpipe control run aws_compliance.control.es_domain_dedicated_master_nodes_min_3Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run aws_compliance.control.es_domain_dedicated_master_nodes_min_3 --shareSQL
This control uses a named query:
es_domain_dedicated_master_nodes_min_3