Ensure that elasticsearch domains enforce HTTPS

Docs > コード分析 > Static Analysis Rules > Ensure that elasticsearch domains enforce HTTPS

このページは日本語には対応しておりません。随時翻訳に取り組んでいます。翻訳に関してご質問やご意見ございましたら、お気軽にご連絡ください。

Metadata

ID: terraform-aws/aws-opensearch-enforce-https

Language: Terraform

Severity: Warning

Category: Security

Description

No description found

Non-Compliant Code Examples

resource "aws_elasticsearch_domain" "mydomain" {
  domain_name = "foobar"
  domain_endpoint_options {
  }
  node_to_node_encryption {
    enabled = false
  }
}

resource "aws_elasticsearch_domain" "mydomain" {
  domain_name = "foobar"
  domain_endpoint_options {
    enforce_https = false
  }
  node_to_node_encryption {
    enabled = false
  }
}

Compliant Code Examples

resource "aws_elasticsearch_domain" "mydomain" {
  domain_name = "foobar"
  domain_endpoint_options {
    enforce_https = true
  }
  node_to_node_encryption {
    enabled = false
  }
}