AWS Elastic Search Audit - Security Checks

Checks Performed

• Auth Should Be Enabled ElastiCache Replication Groups
• Elasticache Automatic Failover Should Be Enabled
• Elasticache Clusters Should Have Automatic Backup
• ElastiCache Should Be Encrypted
• ElasticSearch Cluster Status Should Be Healthy
• Elasticsearch Clusters Should Have Dedicated Master Enabled
• Elasticsearch Clusters Should Not Be Idle
• Elasticsearch Domain Should Be Encrypted with KMS CMKs
• Elasticsearch Domains Should Be Accessible Only From Whitelisted IP Addresses
• ElasticSearch Domains Should Be Encrypted
• ElasticSearch Domains Should Be Launched With Private VPC Endpoints
• ElasticSearch Domains Should Have Node To Node Encryption
• Elasticsearch Domains Should Not Allow Cross Account Access
• Elasticsearch Domains Should Not Be Publicly Exposed
• ElasticSearch Domains Should Use The Latest Service Software
• Elasticsearch Instance Count
• Elasticsearch Reserved Instance Lease Expiration In The Next 30 Days
• Elasticsearch Reserved Instance Lease Expiration In The Next 7 Days
• Elasticsearch Reserved Instance Recent Purchases Should Be Reviewed
• Elasticsearch Reserved Instance Should Not Have Status - Payment Failed
• Elasticsearch Reserved Instance Should Not Have Status - Payment Pending
• Elasticsearch Should Have Free Storage Space
• ElasticSearch Should Have Logging Enabled
• Elasticsearch Should Have Zone Awareness Enabled
• Elasticsearch Should Use General Purpose SSD
• ElasticSearch Should Use HTTPS Only
• Elasticsearch Should Use The Desired Instance Type
• RBAC Authentication Should Be Enabled ElastiCache Replication Groups