github.com/khulnasoft-lab/defsec@v1.0.5-0.20230827010352-5e9f46893d95/avd_docs/aws/elasticsearch/AVD-AWS-0046/CloudFormation.md (about) 1 2 Enforce the use of HTTPS for ElasticSearch 3 4 ```yaml--- 5 Resources: 6 GoodExample: 7 Type: AWS::Elasticsearch::Domain 8 Properties: 9 DomainName: 'test' 10 DomainEndpointOptions: 11 EnforceHTTPS: true 12 13 ElasticsearchVersion: '7.10' 14 EncryptionAtRestOptions: 15 Enabled: true 16 KmsKeyId: alias/kmskey 17 ElasticsearchClusterConfig: 18 DedicatedMasterEnabled: true 19 InstanceCount: '2' 20 ZoneAwarenessEnabled: true 21 InstanceType: 'm3.medium.elasticsearch' 22 DedicatedMasterType: 'm3.medium.elasticsearch' 23 DedicatedMasterCount: '3' 24 EBSOptions: 25 EBSEnabled: true 26 Iops: '0' 27 VolumeSize: '20' 28 VolumeType: 'gp2' 29 30 ``` 31 32