AWS OpenSearch Terraform module
Upstream version 2.11.1
6 controls from HIPAA Omnibus Rule 2013 requirements
Terraform Module Source
hipaa.compliance.tf/terraform-aws-modules/opensearch/awsCloudWatch log groups should have retention period of at least 365 days
cloudwatch_log_group_retention_period_365164.312(b)
Framework requirement
Log groups should have encryption at rest enabled
log_group_encryption_at_rest_enabled164.308(a)(1)(ii)(B)
Framework requirement
OpenSearch domains should have encryption at rest enabled
opensearch_domain_encryption_at_rest_enabled164.308(a)(1)(ii)(B)
Framework requirement
OpenSearch domains should use HTTPS
opensearch_domain_https_required164.314(b)(2)(iv)
Framework requirement
OpenSearch domains should be in a VPC
opensearch_domain_in_vpc164.312(a)(1)
Framework requirement
OpenSearch domains node-to-node encryption should be enabled
opensearch_domain_node_to_node_encryption_enabled164.308(a)(4)(ii)(A)
Framework requirement