CKV2_AWS_5 fails to identify opensearch attachment

[coilysiren]

Describe the issue

checkov does not detect when a security group is attached to an AWS OpenSearch instance.

The check ID is CKV2_AWS_5

Examples

Here's an example of a PR with the failing checkout configuration in question.

Version:

• Github Action version v12.2875.0
• Checkov version v3.2.257

Additional context

I suspect that the problem is that aws_opensearch_domain needs to be added to this list: https://github.com/bridgecrewio/checkov/blob/main/checkov/terraform/checks/graph_checks/aws/SGAttachedToResource.yaml

[coilysiren]

Linking the PR instead of the diff: HHS/simpler-grants-gov#2341