AWS Cloudsearch does not use HTTPs
Description
CloudSearch is a managed search service for your web service. CloudSearch Domains allow you to enforce that requests come over HTTPS, encrypting those requests.
Remediation
. In the AWS Console, go to CloudSearch.
. Select the domain you wish to edit.
. Under Domain configuration, next to HTTPS options, select Edit.
. Enable Toggle HTTPS options.
. Select Submit. === Fix - Buildtime
Terraform
resource "aws_cloudsearch_domain" "example" {
...
... }
Rule Details
| Field | Value |
|---|---|
| ID | IAC-0268 |
| Severity | LOW |
| IaC Type | Terraform |
| Frameworks | Terraform |
| Checkov ID | CKV_AWS_220 |