Control: Elasticsearch domain should send logs to cloudWatch
Description
Ensure if Amazon OpenSearch Service (OpenSearch Service) domains are configured to send logs to Amazon CloudWatch Logs. The rule is complaint if a log is enabled for an OpenSearch Service domain. This rule is non complain if logging is not configured.
Usage
Run the control in your terminal:
powerpipe control run terraform_aws_compliance.control.es_domain_logs_to_cloudwatchSnapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run terraform_aws_compliance.control.es_domain_logs_to_cloudwatch --shareSQL
This control uses a named query:
es_domain_logs_to_cloudwatch