This website uses Cookies. Click Accept to agree to our website's cookie use as described in our Privacy Policy. Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
ABOUT CHECKMATES CYBER SECURITY COMMUNITY & FAQ
Create a Post
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 

Are you a member of CheckMates?

×
Sign in with your Check Point UserCenter/PartnerMap account to access more great content and get a chance to win some Apple AirPods! If you don't have an account, create one now for free!
Offir_Zigelman
Employee Alumnus
Employee Alumnus
‎2019-11-15 12:19 AM

New CloudGuard Dome9 Compliance Entity: AWS ElasticSearchDomain

Dome9 now supports AWS ElasticSearchDomain as an entity in the Compliance Engine.

AWS ElasticSearch is a fully managed ElasticSearch service. The new entity allows to reason on different aspects of the search domains, such as encryption state, access policies, logging and various deployment and backup configurations.

GSL Examples:

  • Make sure the data is encrypted at rest:
    ElasticSearchDomain should have encryptionAtRestOptions.enabled = true
  • Make sure the data is encrypted in transit:
    ElasticSearchDomain should have nodeToNodeEncryptionOptions.enabled = false
  • Enforce creation of ElasticSearch instances in VPCs:
    ElasticSearchDomain should have vpc
Offir Zigelman, Dome9 Product Team Lead
0 Kudos
0 Replies
UPCOMING CLOUDMATES EVENTS
    All CloudMates Events