Is encrypt_at_rest enforced for GDPR?

Yes, This control checks whether AWS OpenSearch domains have encryption-at-rest configuration enabled. The check fails if encryption at rest is not enabled.

Is node_to_node_encryption enforced for GDPR?

Yes, This control checks if AWS OpenSearch Service nodes are encrypted end to end. The rule is non-compliant if the node-to-node encryption is not enabled on the domain.

terraform-aws-modules/opensearch/aws for GDPR

Controls

3 controls from GDPR apply to this module.

Control	Clause	Change
Log groups should have encryption at rest enabledlog_group_encryption_at_rest_enabled None	None
OpenSearch domains should have encryption at rest enabledopensearch_domain_encryption_at_rest_enabled None	None
OpenSearch domains node-to-node encryption should be enabledopensearch_domain_node_to_node_encryption_enabled None	None