feat: AWS Security Updates

[jjfrench]

Description

Addresses several security configurations with the OpenSearch service. https://docs.aws.amazon.com/securityhub/latest/userguide/opensearch-controls.html

• [OpenSearch.3] OpenSearch domains should encrypt data sent between nodes
  • node_to_node_encryption configured to True
• [OpenSearch.4] OpenSearch domain error logging to CloudWatch Logs should be enabled
  • app logging is the only other logging option available; we can enable it and verify in the settings
• [OpenSearch.5] OpenSearch domains should have audit logging enabled
  • audit_log_enabled configured to True
• [OpenSearch.8] Connections to OpenSearch domains should be encrypted using the latest TLS security policy
  • enforce_https must be enabled, tls_security_policy configured to TLS_1_2

[jjfrench]

Would this need a blue green deployment?

[wrynearson]

Let's wait for @sunu to return before dealing with this. cc @batpad @thenav56