Control: Elasticsearch domain error logging to CloudWatch Logs should be enabled
Description
This control checks whether Elasticsearch domains are configured to send error logs to CloudWatch Logs.
Usage
Run the control in your terminal:
powerpipe control run aws_compliance.control.es_domain_error_logging_enabled
Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run aws_compliance.control.es_domain_error_logging_enabled --share
SQL
This control uses a named query:
es_domain_error_logging_enabled