OpenSearch domains should have fine-grained access control enabled

このページは日本語には対応しておりません。随時翻訳に取り組んでいます。翻訳に関してご質問やご意見ございましたら、お気軽にご連絡ください。

Description

This control checks whether Amazon OpenSearch Service domains have fine-grained access control (FGAC) enabled. Fine-grained access control provides granular permissions management, including index-level, document-level, and field-level security. The control fails if FGAC is not enabled, as it is required through the advanced-security-options in the OpenSearch parameter update-domain-config. Enabling FGAC enhances data security by offering additional methods to control access to your data on Amazon OpenSearch Service.

Remediation

To enable fine-grained access control for an Amazon OpenSearch Service domain, refer to the Fine-Grained Access Control in Amazon OpenSearch Service section of the Amazon OpenSearch Service Developer Guide.