Skip to main content

AWS OpenSearch Service Domain is not in an Amazon VPC

Overview​

Checks if Amazon OpenSearch Service domains are in an Amazon Virtual Private Cloud (VPC). It does not evaluate the VPC subnet routing configuration to determine public access

Vendor​

AWS

Cloud Service​

OpenSearch

Opensearch.2

References​

https://docs.aws.amazon.com/config/latest/developerguide/opensearch-in-vpc-only.html, https://docs.aws.amazon.com/opensearch-service/latest/developerguide/vpc.html, https://docs.aws.amazon.com/securityhub/latest/userguide/opensearch-controls.html, https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_VPCDerivedInfo.html

Severity​

5

Item Types​

AWS::OpenSearch::Domain