Construct Overview

Opinionated L2 constructs for OpenSearch.

Security/Compliance

OpenSearch Domain

• Enforce Domain Name
• Enforce disablement of Basic Auth
• Enforce TLS 1.2+
• Enforce retention on stack deletion
• Enforce node to node encryption
• Enforce logging
• Enforce KMS CMK encryption at rest
• Assign admin role to fine grained admin access