Severity: Medium
Description: This Control ensures that Elasticsearch Service domains are using the latest version of the Elasticsearch engine. AWS Elasticsearch Service domain gives the flexibility to choose the Elasticsearch engine version at the time of creation and upgrade option after creation. Using the latest version for the Elasticsearch engine ensures regular security patches.
Remediation Steps:
Perform following to enable node to node encryption:
Login to the AWS Management Console at https://console.aws.amazon.com.
Navigate to ES console.
In the navigation pane, under My domains, choose the domain that you want to upgrade the engine version.
In the Actions, dropdown chooses the Upgrade domain option.
In the Version to upgrade to field choose the latest version from the dropdown.
Click Submit.
Important:
AWS Elasticsearch Service does not support in-place Elasticsearch upgrades For Elasticsearch engine versions 1.5 and 2.3. To upgrade these versions refer https://docs.aws.amazon.com/elasticsearch-service/latest/developerguide/es-version-migration.html .
Reference: