Posted On: Oct 22, 2019

Amazon Elasticsearch Service now lets you configure your domains to require that all traffic be submitted over HTTPS so that you can ensure that communications between your clients and your domain are encrypted. You can also configure the minimum required TLS version to accept, with TLS 1.2 as the default. This option is a useful additional security control to ensure your clients are not misconfigured. For information on enabling this feature, see the documentation

The require HTTPS configuration for Amazon Elasticsearch Service domains is now available in AWS China (Beijing) Region, Operated by Sinnet, and the AWS China (Ningxia) Region, Operated by NWCD.