github.com/khulnasoft-lab/defsec@v1.0.5-0.20230827010352-5e9f46893d95/avd_docs/aws/elasticsearch/AVD-AWS-0048/Terraform.md (about) 1 2 Enable ElasticSearch domain encryption 3 4 ```hcl 5 resource "aws_elasticsearch_domain" "good_example" { 6 domain_name = "domain-foo" 7 8 encrypt_at_rest { 9 enabled = true 10 } 11 } 12 13 ``` 14 15 #### Remediation Links 16 - https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/elasticsearch_domain#encrypt_at_rest 17