1- < p > Amazon OpenSearch Service is a managed service to host OpenSearch instances. It replaces Elasticsearch Service, which has been deprecated. To
2- harden domain (cluster) data in case of unauthorized access, OpenSearch provides data-at-rest encryption if the engine is OpenSearch or Elasticsearch
3- with a version of 5.1 or above. Enabling encryption at rest will help protect:</ p >
1+ < p > Amazon OpenSearch Service is a managed service to host OpenSearch instances. It replaces Elasticsearch Service, which has been deprecated.</ p >
2+ < p > To harden domain (cluster) data in case of unauthorized access, OpenSearch provides data-at-rest encryption if the engine is OpenSearch (any
3+ version), or Elasticsearch with a version of 5.1 or above. Enabling encryption at rest will help protect:</ p >
44< ul >
5- < li > Indices </ li >
6- < li > Logs </ li >
7- < li > Swap files </ li >
8- < li > Data in the application directory </ li >
9- < li > Automated snapshots </ li >
5+ < li > indices </ li >
6+ < li > logs </ li >
7+ < li > swap files </ li >
8+ < li > data in the application directory </ li >
9+ < li > automated snapshots </ li >
1010</ ul >
1111< p > Thus, adversaries cannot access the data if they gain physical access to the storage medium.</ p >
1212< h2 > Ask Yourself Whether</ h2 >
@@ -16,8 +16,8 @@ <h2>Ask Yourself Whether</h2>
1616</ ul >
1717< p > There is a risk if you answered yes to any of those questions.</ p >
1818< h2 > Recommended Secure Coding Practices</ h2 >
19- < p > It’s recommended to encrypt OpenSearch domains that contain sensitive information. OpenSearch handles encryption and decryption transparently, so
20- no further modifications to the application are necessary.</ p >
19+ < p > It is recommended to encrypt OpenSearch domains that contain sensitive information.</ p >
20+ < p > OpenSearch handles encryption and decryption transparently, so no further modifications to the application are necessary.</ p >
2121< h2 > Sensitive Code Example</ h2 >
2222< p > For < a href ="https://docs.aws.amazon.com/cdk/api/v2/python/aws_cdk.aws_opensearchservice/Domain.html "> aws_cdk.aws_opensearchservice.Domain</ a > :</ p >
2323< pre >
0 commit comments