Enable SSE, enforce HTTPS, enable node-to-node encryption (#1851)

kukushking · web-flow · commit 2cf66adae432 · 2022-12-08T08:01:13.000-08:00
diff --git a/test_infra/stacks/opensearch_stack.py b/test_infra/stacks/opensearch_stack.py
@@ -75,6 +75,11 @@ def _setup_opensearch_1(self) -> None:
                     resources=[f"{domain_arn}/*"],
                 )
             ],
+            enforce_https=True,
+            node_to_node_encryption=True,
+            encryption_at_rest=opensearch.EncryptionAtRestOptions(
+                enabled=True,
+            ),
             removal_policy=RemovalPolicy.DESTROY,
         )
 

Original file line number	Diff line number	Diff line change
`@@ -75,6 +75,11 @@ def _setup_opensearch_1(self) -> None:`
`75`	`75`	`resources=[f"{domain_arn}/*"],`
`76`	`76`	`)`
`77`	`77`	`],`
	`78`	`+ enforce_https=True,`
	`79`	`+ node_to_node_encryption=True,`
	`80`	`+ encryption_at_rest=opensearch.EncryptionAtRestOptions(`
	`81`	`+ enabled=True,`
	`82`	`+ ),`
`78`	`83`	`removal_policy=RemovalPolicy.DESTROY,`
`79`	`84`	`)`
`80`	`85`