AWS OpenSearch Terraform module
Upstream version 2.11.1
7 controls from Title 21 CFR Part 11 requirements
Terraform Module Source
cfrpart11.compliance.tf/terraform-aws-modules/opensearch/awsCloudWatch log groups should have retention period of at least 365 days
cloudwatch_log_group_retention_period_36511.10(c)
Framework requirement
Log groups should have encryption at rest enabled
log_group_encryption_at_rest_enabled11.30
Framework requirement
OpenSearch domains should have audit logging enabled
opensearch_domain_audit_logging_enabled11.10(e)
Framework requirement
OpenSearch domains should have encryption at rest enabled
opensearch_domain_encryption_at_rest_enabled11.10(g)
Framework requirement
OpenSearch domains should use HTTPS
opensearch_domain_https_required11.30
Framework requirement
OpenSearch domains should have logging to CloudWatch Logs enabled
opensearch_domain_logs_to_cloudwatch11.10(e)
Framework requirement
OpenSearch domains node-to-node encryption should be enabled
opensearch_domain_node_to_node_encryption_enabled11.10(g)
Framework requirement