Control: Amazon Elasticsearch Service domains should be in a VPC
Description
This control checks whether Amazon Elasticsearch Service domains are in a VPC. It does not evaluate the VPC subnet routing configuration to determine public access. You should ensure that Amazon Elasticsearch domains are not attached to public subnets.
Usage
Run the control in your terminal:
powerpipe control run terraform_aws_compliance.control.es_domain_in_vpc
Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run terraform_aws_compliance.control.es_domain_in_vpc --share
SQL
This control uses a named query:
es_domain_in_vpc