Amazon Elasticsearch Encrypted at Rest

AWSTemplateFormatVersion: '2010-09-09'
Description: ''
Resources:
  ConfigRule:
    Type: 'AWS::Config::ConfigRule'
    Properties:
      ConfigRuleName: elasticsearch-encrypted-at-rest
      Description: >-
        A Config rule that checks whether Amazon Elasticsearch Service (Amazon
        ES) domains have encryption at rest configuration enabled. The rule is
        NON_COMPLIANT if the EncryptionAtRestOptions field is not enabled.
      Scope:
        ComplianceResourceTypes: []
      Source:
        Owner: AWS
        SourceIdentifier: ELASTICSEARCH_ENCRYPTED_AT_REST
      MaximumExecutionFrequency: TwentyFour_Hours
Parameters: {}
Metadata: {}
Conditions: {}