Control: 6 Elasticsearch domains should have at least three data nodes
Description
This control checks whether Elasticsearch domains are configured with at least three data nodes and zoneAwarenessEnabled is true.
An Elasticsearch domain requires at least three data nodes for high availability and fault-tolerance. Deploying an Elasticsearch domain with at least three data nodes ensures cluster operations if a node fails.
Remediation
To modify the number of data nodes in an Amazon ES domain
- Open the Amazon Elasticsearch console.
- Under
My domains, choose the name of the domain to edit. - Choose
Edit domain. - Under
Data nodes, setNumber of nodesto a number greater than or equal to three. For three Availability Zone deployments, set to a multiple of three to ensure equal distribution across Availability Zones. - Under Dedicated master nodes, set Instance type to the desired instance type.
- Choose
Submit.
Usage
Run the control in your terminal:
powerpipe control run aws_compliance.control.foundational_security_es_6Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run aws_compliance.control.foundational_security_es_6 --shareSQL
This control uses a named query:
es_domain_data_nodes_min_3