turbot/terraform_aws_compliance

Control: Elasticsearch domains should be configured with at least three dedicated master nodes

Description

This control checks whether Elasticsearch domains are configured with at least three dedicated master nodes. This control fails if the domain does not use dedicated master nodes. This control passes if Elasticsearch domains have five dedicated master nodes. However, using more than three master nodes might be unnecessary to mitigate the availability risk, and will result in additional cost.

Usage

Run the control in your terminal:

powerpipe control run terraform_aws_compliance.control.es_domain_dedicated_master_nodes_min_3

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run terraform_aws_compliance.control.es_domain_dedicated_master_nodes_min_3 --share

SQL

This control uses a named query:

es_domain_dedicated_master_nodes_min_3

Tags