logo

Database

Aws Node To Node Encryption Disabled

Description

Detects AWS OpenSearch domains that have node-to-node encryption disabled. Node-to-node encryption is a critical security feature that encrypts communication between nodes in an OpenSearch cluster using TLS, protecting sensitive data in transit from potential eavesdropping or man-in-the-middle attacks.

Weakness:

165 - Insecure service configuration - AWS

Category: Functionality Abuse

Detection Strategy

    Scans all OpenSearch domains in the specified AWS region

    Checks the 'NodeToNodeEncryptionOptions.Enabled' configuration for each domain

    Reports a vulnerability if node-to-node encryption is disabled (false) or not configured

    Includes the domain's ARN and encryption status in the vulnerability report