OpenSearch domains should have fine-grained access control enabled

opensearch
Esta página aún no está disponible en español. Estamos trabajando en su traducción.
Si tienes alguna pregunta o comentario sobre nuestro actual proyecto de traducción, no dudes en ponerte en contacto con nosotros.

Description

This control checks whether Amazon OpenSearch Service domains have fine-grained access control (FGAC) enabled. Fine-grained access control provides granular permissions management, including index-level, document-level, and field-level security. The control fails if FGAC is not enabled, as it is required through the advanced-security-options in the OpenSearch parameter update-domain-config. Enabling FGAC enhances data security by offering additional methods to control access to your data on Amazon OpenSearch Service.

Remediation

To enable fine-grained access control for an Amazon OpenSearch Service domain, refer to the Fine-Grained Access Control in Amazon OpenSearch Service section of the Amazon OpenSearch Service Developer Guide.