- CheckMates
- :
- Products
- :
- CloudMates Products
- :
- CNAPP
- :
- New CloudGuard Dome9 Compliance Entity: AWS Elasti...
Options
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Mute
- Printer Friendly Page
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Are you a member of CheckMates?
×
Sign in with your Check Point UserCenter/PartnerMap account to access more great content and get a chance to win some Apple AirPods! If you don't have an account, create one now for free!
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
New CloudGuard Dome9 Compliance Entity: AWS ElasticSearchDomain
Dome9 now supports AWS ElasticSearchDomain as an entity in the Compliance Engine.
AWS ElasticSearch is a fully managed ElasticSearch service. The new entity allows to reason on different aspects of the search domains, such as encryption state, access policies, logging and various deployment and backup configurations.
GSL Examples:
- Make sure the data is encrypted at rest:
ElasticSearchDomain should have encryptionAtRestOptions.enabled = true - Make sure the data is encrypted in transit:
ElasticSearchDomain should have nodeToNodeEncryptionOptions.enabled = false - Enforce creation of ElasticSearch instances in VPCs:
ElasticSearchDomain should have vpc
Offir Zigelman, Dome9 Product Team Lead
0 Replies
![](/skins/images/BFDD56B372A07FDFABDEF003EE622D96/responsive_peak/images/icon_anonymous_message.png)