---
title: elastic-search
---

# elastic-search

## Checks


- [enable-domain-encryption](enable-domain-encryption) Elasticsearch domain isn't encrypted at rest.

- [enable-domain-logging](enable-domain-logging) Domain logging should be enabled for Elastic Search domains

- [enable-in-transit-encryption](enable-in-transit-encryption) Elasticsearch domain uses plaintext traffic for node to node communication.

- [enforce-https](enforce-https) Elasticsearch doesn't enforce HTTPS traffic.

- [use-secure-tls-policy](use-secure-tls-policy) Elasticsearch domain endpoint is using outdated TLS policy.



