HTTPS Access Is Enabled for CSS Clusters

Rule Details

Applicable Scenario

You can enable HTTPS for CSS clusters. If HTTPS is disabled, HTTP is used for cluster communication. This compromises data security, and public access cannot be enabled. For details, see Changing the Security Mode of an Elasticsearch Cluster.

Solution

To enable HTTPS access, the security mode must be enabled for the cluster. Once HTTPS access is enabled, all communication with the cluster will be encrypted. To enable the security mode, call the Configuring the Security Mode API.

Rule Logic

• If a CSS cluster does not have the security mode enabled, this cluster is noncompliant.
• If a CSS cluster has the security mode enabled but has HTTPS disabled, this cluster is noncompliant.
• If a CSS cluster has HTTPS enabled, this cluster is compliant.