rspec/rules/S6308/description.adoc
2021-11-12 17:55:10 +01:00

11 lines
465 B
Plaintext

Amazon Elasticsearch Service (ES) is a managed service to host Elasticsearch instances.
To harden domain (cluster) data in case of unauthorized access, ES provides data-at-rest encryption if the Elasticsearch version is 5.1 or above. Enabling encryption at rest will help protect:
* Indices
* Logs
* Swap files
* Data in the application directory
* Automated snapshots
Thus, if adversaries gain physical access to the storage medium, they cannot access the data.