Policy Updates

Ensure Amazon Elasticsearch Service (ES) domains has enforce HTTPS enabled
Description This policy ensures that all traffic to Amazon Elasticsearch Service (ES) domains is encrypted using HTTPS. This helps to protect the confident...
Thu, 20 Jul, 2023 at 2:28 PM
Ensure Amazon Elasticsearch Service (ES) domains internal user database enabled
Description: The Amazon Elasticsearch Service (ES) internal user database is a secure way to manage access to your ES domains. By enabling the internal use...
Thu, 20 Jul, 2023 at 2:30 PM
Ensure Amazon Elasticsearch Service (ES) domains have updates available
Description: This policy ensures that Amazon Elasticsearch Service (ES) domains have the latest security updates and bug fixes. This is important to do bec...
Thu, 20 Jul, 2023 at 2:34 PM
Ensure there are no connection and authentication for Internet exposed Elasticsearch/Kibana ports
Description: This policy ensures that Amazon Elasticsearch Service (ES) and Kibana ports are not exposed to the internet. This is important to do because e...
Thu, 20 Jul, 2023 at 2:39 PM
Ensure there are no connection and authentication for Internet exposed Amazon Elasticsearch Service (ES) domains
Description: This policy ensures that Amazon Elasticsearch Service (ES) domains are not exposed to the internet and cannot be accessed without authenticati...
Thu, 20 Jul, 2023 at 2:41 PM
Ensure trust boundaries in VPC endpoint services have connections
Description: This policy ensures that trust boundaries in VPC endpoint services have connections. This is important to do because it ensures that only auth...
Thu, 20 Jul, 2023 at 2:44 PM
Ensure trust boundaries in VPC endpoint services have allowlisted principles
Description: This policy ensures that trust boundaries in VPC endpoint services only allow connections from allowlisted principles. This is important to do...
Thu, 20 Jul, 2023 at 2:46 PM
Ensure Elastic Load Balancers have insecure SSL ciphers
Description: Elastic Load Balancing (ELB) uses Secure Socket Layer (SSL) to encrypt traffic between clients and the load balancer. However, some ELBs may b...
Thu, 20 Jul, 2023 at 2:51 PM
Ensure EKS Control Plane Audit Logging is enabled for all log types
Description: Amazon Elastic Kubernetes Service (EKS) control plane audit logging enables you to collect logs of all control plane API requests and events. ...
Thu, 20 Jul, 2023 at 3:02 PM
Ensure EKS Clusters are created with Private Endpoint Enabled and Public Access Disabled
Description: Amazon Elastic Kubernetes Service (EKS) allows you to create clusters with private endpoints. This means that the Kubernetes API server will o...
Thu, 20 Jul, 2023 at 3:05 PM