AWS-ES-ElasticSearch-IAM-Authentication

Owned by naveen
Dec 06, 2021
1 min read

Severity : High

Description : ElasticSearch domains can allow access without IAM authentication by having a policy that does not specify the principal or has a wildcard principal.

Remediation Steps : Configure the ElasticSearch domain to have an access policy without a global principal or no principal

Blue Hexagon Proprietary