Controls
10 controls from PCI DSS v4.0 apply to this module.
| Control | Clause | Change |
|---|---|---|
| CloudWatch log groups should have retention period of at least 365 dayscloudwatch_log_group_retention_period_365 3.2.1 | 3.2.1 | |
| Log groups should have encryption at rest enabledlog_group_encryption_at_rest_enabled 3.5.1 | 3.5.1 | |
| OpenSearch domains should have audit logging enabledopensearch_domain_audit_logging_enabled 5.3.4 | 5.3.4 | |
| OpenSearch domains should have encryption at rest enabledopensearch_domain_encryption_at_rest_enabled 3.5.1 | 3.5.1 | |
| OpenSearch domains should have fine-grained access control enabledopensearch_domain_fine_grained_access_enabled 7.2.1 | 7.2.1 | |
| OpenSearch domains should use HTTPSopensearch_domain_https_required 1.2.5 | 1.2.5 | |
| OpenSearch domains should be in a VPCopensearch_domain_in_vpc 1.2.8 | 1.2.8 | |
| OpenSearch domains should have logging to CloudWatch Logs enabledopensearch_domain_logs_to_cloudwatch 5.3.4 | 5.3.4 | |
| OpenSearch domains node-to-node encryption should be enabledopensearch_domain_node_to_node_encryption_enabled 1.2.5 | 1.2.5 | |
| VPC Security groups should only allow unrestricted incoming traffic for authorized portsvpc_security_group_allows_ingress_authorized_ports 1.3.2 | 1.3.2 |