github.com/khulnasoft-lab/defsec@v1.0.5-0.20230827010352-5e9f46893d95/avd_docs/aws/elasticsearch/AVD-AWS-0042/Terraform.md (about) 1 2 Enable logging for ElasticSearch domains 3 4 ```hcl 5 resource "aws_elasticsearch_domain" "good_example" { 6 domain_name = "example" 7 elasticsearch_version = "1.5" 8 9 log_publishing_options { 10 cloudwatch_log_group_arn = aws_cloudwatch_log_group.example.arn 11 log_type = "AUDIT_LOGS" 12 enabled = true 13 } 14 } 15 16 ``` 17 18 #### Remediation Links 19 - https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/elasticsearch_domain#log_type 20