1. Packages
  2. AWS Classic
  3. API Docs
  4. elasticsearch
  5. Domain

Try AWS Native preview for resources not in the classic version.

AWS Classic v6.4.0 published on Tuesday, Oct 3, 2023 by Pulumi

aws.elasticsearch.Domain

Explore with Pulumi AI

aws logo

Try AWS Native preview for resources not in the classic version.

AWS Classic v6.4.0 published on Tuesday, Oct 3, 2023 by Pulumi

    Manages an AWS Elasticsearch Domain.

    Example Usage

    Basic Usage

    using System.Collections.Generic;
    using System.Linq;
    using Pulumi;
    using Aws = Pulumi.Aws;
    
    return await Deployment.RunAsync(() => 
    {
        var example = new Aws.ElasticSearch.Domain("example", new()
        {
            ClusterConfig = new Aws.ElasticSearch.Inputs.DomainClusterConfigArgs
            {
                InstanceType = "r4.large.elasticsearch",
            },
            ElasticsearchVersion = "7.10",
            Tags = 
            {
                { "Domain", "TestDomain" },
            },
        });
    
    });
    
    package main
    
    import (
    	"github.com/pulumi/pulumi-aws/sdk/v6/go/aws/elasticsearch"
    	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
    )
    
    func main() {
    	pulumi.Run(func(ctx *pulumi.Context) error {
    		_, err := elasticsearch.NewDomain(ctx, "example", &elasticsearch.DomainArgs{
    			ClusterConfig: &elasticsearch.DomainClusterConfigArgs{
    				InstanceType: pulumi.String("r4.large.elasticsearch"),
    			},
    			ElasticsearchVersion: pulumi.String("7.10"),
    			Tags: pulumi.StringMap{
    				"Domain": pulumi.String("TestDomain"),
    			},
    		})
    		if err != nil {
    			return err
    		}
    		return nil
    	})
    }
    
    package generated_program;
    
    import com.pulumi.Context;
    import com.pulumi.Pulumi;
    import com.pulumi.core.Output;
    import com.pulumi.aws.elasticsearch.Domain;
    import com.pulumi.aws.elasticsearch.DomainArgs;
    import com.pulumi.aws.elasticsearch.inputs.DomainClusterConfigArgs;
    import java.util.List;
    import java.util.ArrayList;
    import java.util.Map;
    import java.io.File;
    import java.nio.file.Files;
    import java.nio.file.Paths;
    
    public class App {
        public static void main(String[] args) {
            Pulumi.run(App::stack);
        }
    
        public static void stack(Context ctx) {
            var example = new Domain("example", DomainArgs.builder()        
                .clusterConfig(DomainClusterConfigArgs.builder()
                    .instanceType("r4.large.elasticsearch")
                    .build())
                .elasticsearchVersion("7.10")
                .tags(Map.of("Domain", "TestDomain"))
                .build());
    
        }
    }
    
    import pulumi
    import pulumi_aws as aws
    
    example = aws.elasticsearch.Domain("example",
        cluster_config=aws.elasticsearch.DomainClusterConfigArgs(
            instance_type="r4.large.elasticsearch",
        ),
        elasticsearch_version="7.10",
        tags={
            "Domain": "TestDomain",
        })
    
    import * as pulumi from "@pulumi/pulumi";
    import * as aws from "@pulumi/aws";
    
    const example = new aws.elasticsearch.Domain("example", {
        clusterConfig: {
            instanceType: "r4.large.elasticsearch",
        },
        elasticsearchVersion: "7.10",
        tags: {
            Domain: "TestDomain",
        },
    });
    
    resources:
      example:
        type: aws:elasticsearch:Domain
        properties:
          clusterConfig:
            instanceType: r4.large.elasticsearch
          elasticsearchVersion: '7.10'
          tags:
            Domain: TestDomain
    

    Access Policy

    using System.Collections.Generic;
    using System.Linq;
    using Pulumi;
    using Aws = Pulumi.Aws;
    
    return await Deployment.RunAsync(() => 
    {
        var config = new Config();
        var domain = config.Get("domain") ?? "tf-test";
        var currentRegion = Aws.GetRegion.Invoke();
    
        var currentCallerIdentity = Aws.GetCallerIdentity.Invoke();
    
        var example = new Aws.ElasticSearch.Domain("example", new()
        {
            AccessPolicies = Output.Tuple(currentRegion, currentCallerIdentity).Apply(values =>
            {
                var currentRegion = values.Item1;
                var currentCallerIdentity = values.Item2;
                return @$"{{
      ""Version"": ""2012-10-17"",
      ""Statement"": [
        {{
          ""Action"": ""es:*"",
          ""Principal"": ""*"",
          ""Effect"": ""Allow"",
          ""Resource"": ""arn:aws:es:{currentRegion.Apply(getRegionResult => getRegionResult.Name)}:{currentCallerIdentity.Apply(getCallerIdentityResult => getCallerIdentityResult.AccountId)}:domain/{domain}/*"",
          ""Condition"": {{
            ""IpAddress"": {{""aws:SourceIp"": [""66.193.100.22/32""]}}
          }}
        }}
      ]
    }}
    ";
            }),
        });
    
    });
    
    package main
    
    import (
    	"fmt"
    
    	"github.com/pulumi/pulumi-aws/sdk/v6/go/aws"
    	"github.com/pulumi/pulumi-aws/sdk/v6/go/aws/elasticsearch"
    	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
    	"github.com/pulumi/pulumi/sdk/v3/go/pulumi/config"
    )
    
    func main() {
    	pulumi.Run(func(ctx *pulumi.Context) error {
    		cfg := config.New(ctx, "")
    		domain := "tf-test"
    		if param := cfg.Get("domain"); param != "" {
    			domain = param
    		}
    		currentRegion, err := aws.GetRegion(ctx, nil, nil)
    		if err != nil {
    			return err
    		}
    		currentCallerIdentity, err := aws.GetCallerIdentity(ctx, nil, nil)
    		if err != nil {
    			return err
    		}
    		_, err = elasticsearch.NewDomain(ctx, "example", &elasticsearch.DomainArgs{
    			AccessPolicies: pulumi.Any(fmt.Sprintf(`{
      "Version": "2012-10-17",
      "Statement": [
        {
          "Action": "es:*",
          "Principal": "*",
          "Effect": "Allow",
          "Resource": "arn:aws:es:%v:%v:domain/%v/*",
          "Condition": {
            "IpAddress": {"aws:SourceIp": ["66.193.100.22/32"]}
          }
        }
      ]
    }
    `, currentRegion.Name, currentCallerIdentity.AccountId, domain)),
    		})
    		if err != nil {
    			return err
    		}
    		return nil
    	})
    }
    
    package generated_program;
    
    import com.pulumi.Context;
    import com.pulumi.Pulumi;
    import com.pulumi.core.Output;
    import com.pulumi.aws.AwsFunctions;
    import com.pulumi.aws.inputs.GetRegionArgs;
    import com.pulumi.aws.inputs.GetCallerIdentityArgs;
    import com.pulumi.aws.elasticsearch.Domain;
    import com.pulumi.aws.elasticsearch.DomainArgs;
    import java.util.List;
    import java.util.ArrayList;
    import java.util.Map;
    import java.io.File;
    import java.nio.file.Files;
    import java.nio.file.Paths;
    
    public class App {
        public static void main(String[] args) {
            Pulumi.run(App::stack);
        }
    
        public static void stack(Context ctx) {
            final var config = ctx.config();
            final var domain = config.get("domain").orElse("tf-test");
            final var currentRegion = AwsFunctions.getRegion();
    
            final var currentCallerIdentity = AwsFunctions.getCallerIdentity();
    
            var example = new Domain("example", DomainArgs.builder()        
                .accessPolicies("""
    {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Action": "es:*",
          "Principal": "*",
          "Effect": "Allow",
          "Resource": "arn:aws:es:%s:%s:domain/%s/*",
          "Condition": {
            "IpAddress": {"aws:SourceIp": ["66.193.100.22/32"]}
          }
        }
      ]
    }
    ", currentRegion.applyValue(getRegionResult -> getRegionResult.name()),currentCallerIdentity.applyValue(getCallerIdentityResult -> getCallerIdentityResult.accountId()),domain))
                .build());
    
        }
    }
    
    import pulumi
    import pulumi_aws as aws
    
    config = pulumi.Config()
    domain = config.get("domain")
    if domain is None:
        domain = "tf-test"
    current_region = aws.get_region()
    current_caller_identity = aws.get_caller_identity()
    example = aws.elasticsearch.Domain("example", access_policies=f"""{{
      "Version": "2012-10-17",
      "Statement": [
        {{
          "Action": "es:*",
          "Principal": "*",
          "Effect": "Allow",
          "Resource": "arn:aws:es:{current_region.name}:{current_caller_identity.account_id}:domain/{domain}/*",
          "Condition": {{
            "IpAddress": {{"aws:SourceIp": ["66.193.100.22/32"]}}
          }}
        }}
      ]
    }}
    """)
    
    import * as pulumi from "@pulumi/pulumi";
    import * as aws from "@pulumi/aws";
    
    const config = new pulumi.Config();
    const domain = config.get("domain") || "tf-test";
    const currentRegion = aws.getRegion({});
    const currentCallerIdentity = aws.getCallerIdentity({});
    const example = new aws.elasticsearch.Domain("example", {accessPolicies: Promise.all([currentRegion, currentCallerIdentity]).then(([currentRegion, currentCallerIdentity]) => `{
      "Version": "2012-10-17",
      "Statement": [
        {
          "Action": "es:*",
          "Principal": "*",
          "Effect": "Allow",
          "Resource": "arn:aws:es:${currentRegion.name}:${currentCallerIdentity.accountId}:domain/${domain}/*",
          "Condition": {
            "IpAddress": {"aws:SourceIp": ["66.193.100.22/32"]}
          }
        }
      ]
    }
    `)});
    
    configuration:
      domain:
        type: string
        default: tf-test
    resources:
      example:
        type: aws:elasticsearch:Domain
        properties:
          accessPolicies: |
            {
              "Version": "2012-10-17",
              "Statement": [
                {
                  "Action": "es:*",
                  "Principal": "*",
                  "Effect": "Allow",
                  "Resource": "arn:aws:es:${currentRegion.name}:${currentCallerIdentity.accountId}:domain/${domain}/*",
                  "Condition": {
                    "IpAddress": {"aws:SourceIp": ["66.193.100.22/32"]}
                  }
                }
              ]
            }        
    variables:
      currentRegion:
        fn::invoke:
          Function: aws:getRegion
          Arguments: {}
      currentCallerIdentity:
        fn::invoke:
          Function: aws:getCallerIdentity
          Arguments: {}
    

    Log Publishing to CloudWatch Logs

    using System.Collections.Generic;
    using System.Linq;
    using Pulumi;
    using Aws = Pulumi.Aws;
    
    return await Deployment.RunAsync(() => 
    {
        var exampleLogGroup = new Aws.CloudWatch.LogGroup("exampleLogGroup");
    
        var examplePolicyDocument = Aws.Iam.GetPolicyDocument.Invoke(new()
        {
            Statements = new[]
            {
                new Aws.Iam.Inputs.GetPolicyDocumentStatementInputArgs
                {
                    Effect = "Allow",
                    Principals = new[]
                    {
                        new Aws.Iam.Inputs.GetPolicyDocumentStatementPrincipalInputArgs
                        {
                            Type = "Service",
                            Identifiers = new[]
                            {
                                "es.amazonaws.com",
                            },
                        },
                    },
                    Actions = new[]
                    {
                        "logs:PutLogEvents",
                        "logs:PutLogEventsBatch",
                        "logs:CreateLogStream",
                    },
                    Resources = new[]
                    {
                        "arn:aws:logs:*",
                    },
                },
            },
        });
    
        var exampleLogResourcePolicy = new Aws.CloudWatch.LogResourcePolicy("exampleLogResourcePolicy", new()
        {
            PolicyName = "example",
            PolicyDocument = examplePolicyDocument.Apply(getPolicyDocumentResult => getPolicyDocumentResult.Json),
        });
    
        // .. other configuration ...
        var exampleDomain = new Aws.ElasticSearch.Domain("exampleDomain", new()
        {
            LogPublishingOptions = new[]
            {
                new Aws.ElasticSearch.Inputs.DomainLogPublishingOptionArgs
                {
                    CloudwatchLogGroupArn = exampleLogGroup.Arn,
                    LogType = "INDEX_SLOW_LOGS",
                },
            },
        });
    
    });
    
    package main
    
    import (
    	"github.com/pulumi/pulumi-aws/sdk/v6/go/aws/cloudwatch"
    	"github.com/pulumi/pulumi-aws/sdk/v6/go/aws/elasticsearch"
    	"github.com/pulumi/pulumi-aws/sdk/v6/go/aws/iam"
    	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
    )
    
    func main() {
    	pulumi.Run(func(ctx *pulumi.Context) error {
    		exampleLogGroup, err := cloudwatch.NewLogGroup(ctx, "exampleLogGroup", nil)
    		if err != nil {
    			return err
    		}
    		examplePolicyDocument, err := iam.GetPolicyDocument(ctx, &iam.GetPolicyDocumentArgs{
    			Statements: []iam.GetPolicyDocumentStatement{
    				{
    					Effect: pulumi.StringRef("Allow"),
    					Principals: []iam.GetPolicyDocumentStatementPrincipal{
    						{
    							Type: "Service",
    							Identifiers: []string{
    								"es.amazonaws.com",
    							},
    						},
    					},
    					Actions: []string{
    						"logs:PutLogEvents",
    						"logs:PutLogEventsBatch",
    						"logs:CreateLogStream",
    					},
    					Resources: []string{
    						"arn:aws:logs:*",
    					},
    				},
    			},
    		}, nil)
    		if err != nil {
    			return err
    		}
    		_, err = cloudwatch.NewLogResourcePolicy(ctx, "exampleLogResourcePolicy", &cloudwatch.LogResourcePolicyArgs{
    			PolicyName:     pulumi.String("example"),
    			PolicyDocument: *pulumi.String(examplePolicyDocument.Json),
    		})
    		if err != nil {
    			return err
    		}
    		_, err = elasticsearch.NewDomain(ctx, "exampleDomain", &elasticsearch.DomainArgs{
    			LogPublishingOptions: elasticsearch.DomainLogPublishingOptionArray{
    				&elasticsearch.DomainLogPublishingOptionArgs{
    					CloudwatchLogGroupArn: exampleLogGroup.Arn,
    					LogType:               pulumi.String("INDEX_SLOW_LOGS"),
    				},
    			},
    		})
    		if err != nil {
    			return err
    		}
    		return nil
    	})
    }
    
    package generated_program;
    
    import com.pulumi.Context;
    import com.pulumi.Pulumi;
    import com.pulumi.core.Output;
    import com.pulumi.aws.cloudwatch.LogGroup;
    import com.pulumi.aws.iam.IamFunctions;
    import com.pulumi.aws.iam.inputs.GetPolicyDocumentArgs;
    import com.pulumi.aws.cloudwatch.LogResourcePolicy;
    import com.pulumi.aws.cloudwatch.LogResourcePolicyArgs;
    import com.pulumi.aws.elasticsearch.Domain;
    import com.pulumi.aws.elasticsearch.DomainArgs;
    import com.pulumi.aws.elasticsearch.inputs.DomainLogPublishingOptionArgs;
    import java.util.List;
    import java.util.ArrayList;
    import java.util.Map;
    import java.io.File;
    import java.nio.file.Files;
    import java.nio.file.Paths;
    
    public class App {
        public static void main(String[] args) {
            Pulumi.run(App::stack);
        }
    
        public static void stack(Context ctx) {
            var exampleLogGroup = new LogGroup("exampleLogGroup");
    
            final var examplePolicyDocument = IamFunctions.getPolicyDocument(GetPolicyDocumentArgs.builder()
                .statements(GetPolicyDocumentStatementArgs.builder()
                    .effect("Allow")
                    .principals(GetPolicyDocumentStatementPrincipalArgs.builder()
                        .type("Service")
                        .identifiers("es.amazonaws.com")
                        .build())
                    .actions(                
                        "logs:PutLogEvents",
                        "logs:PutLogEventsBatch",
                        "logs:CreateLogStream")
                    .resources("arn:aws:logs:*")
                    .build())
                .build());
    
            var exampleLogResourcePolicy = new LogResourcePolicy("exampleLogResourcePolicy", LogResourcePolicyArgs.builder()        
                .policyName("example")
                .policyDocument(examplePolicyDocument.applyValue(getPolicyDocumentResult -> getPolicyDocumentResult.json()))
                .build());
    
            var exampleDomain = new Domain("exampleDomain", DomainArgs.builder()        
                .logPublishingOptions(DomainLogPublishingOptionArgs.builder()
                    .cloudwatchLogGroupArn(exampleLogGroup.arn())
                    .logType("INDEX_SLOW_LOGS")
                    .build())
                .build());
    
        }
    }
    
    import pulumi
    import pulumi_aws as aws
    
    example_log_group = aws.cloudwatch.LogGroup("exampleLogGroup")
    example_policy_document = aws.iam.get_policy_document(statements=[aws.iam.GetPolicyDocumentStatementArgs(
        effect="Allow",
        principals=[aws.iam.GetPolicyDocumentStatementPrincipalArgs(
            type="Service",
            identifiers=["es.amazonaws.com"],
        )],
        actions=[
            "logs:PutLogEvents",
            "logs:PutLogEventsBatch",
            "logs:CreateLogStream",
        ],
        resources=["arn:aws:logs:*"],
    )])
    example_log_resource_policy = aws.cloudwatch.LogResourcePolicy("exampleLogResourcePolicy",
        policy_name="example",
        policy_document=example_policy_document.json)
    # .. other configuration ...
    example_domain = aws.elasticsearch.Domain("exampleDomain", log_publishing_options=[aws.elasticsearch.DomainLogPublishingOptionArgs(
        cloudwatch_log_group_arn=example_log_group.arn,
        log_type="INDEX_SLOW_LOGS",
    )])
    
    import * as pulumi from "@pulumi/pulumi";
    import * as aws from "@pulumi/aws";
    
    const exampleLogGroup = new aws.cloudwatch.LogGroup("exampleLogGroup", {});
    const examplePolicyDocument = aws.iam.getPolicyDocument({
        statements: [{
            effect: "Allow",
            principals: [{
                type: "Service",
                identifiers: ["es.amazonaws.com"],
            }],
            actions: [
                "logs:PutLogEvents",
                "logs:PutLogEventsBatch",
                "logs:CreateLogStream",
            ],
            resources: ["arn:aws:logs:*"],
        }],
    });
    const exampleLogResourcePolicy = new aws.cloudwatch.LogResourcePolicy("exampleLogResourcePolicy", {
        policyName: "example",
        policyDocument: examplePolicyDocument.then(examplePolicyDocument => examplePolicyDocument.json),
    });
    // .. other configuration ...
    const exampleDomain = new aws.elasticsearch.Domain("exampleDomain", {logPublishingOptions: [{
        cloudwatchLogGroupArn: exampleLogGroup.arn,
        logType: "INDEX_SLOW_LOGS",
    }]});
    
    resources:
      exampleLogGroup:
        type: aws:cloudwatch:LogGroup
      exampleLogResourcePolicy:
        type: aws:cloudwatch:LogResourcePolicy
        properties:
          policyName: example
          policyDocument: ${examplePolicyDocument.json}
      exampleDomain:
        type: aws:elasticsearch:Domain
        properties:
          logPublishingOptions:
            - cloudwatchLogGroupArn: ${exampleLogGroup.arn}
              logType: INDEX_SLOW_LOGS
    variables:
      examplePolicyDocument:
        fn::invoke:
          Function: aws:iam:getPolicyDocument
          Arguments:
            statements:
              - effect: Allow
                principals:
                  - type: Service
                    identifiers:
                      - es.amazonaws.com
                actions:
                  - logs:PutLogEvents
                  - logs:PutLogEventsBatch
                  - logs:CreateLogStream
                resources:
                  - arn:aws:logs:*
    

    VPC based ES

    using System.Collections.Generic;
    using System.Linq;
    using Pulumi;
    using Aws = Pulumi.Aws;
    
    return await Deployment.RunAsync(() => 
    {
        var config = new Config();
        var vpc = config.RequireObject<dynamic>("vpc");
        var domain = config.Get("domain") ?? "tf-test";
        var selectedVpc = Aws.Ec2.GetVpc.Invoke(new()
        {
            Tags = 
            {
                { "Name", vpc },
            },
        });
    
        var selectedSubnets = Aws.Ec2.GetSubnets.Invoke(new()
        {
            Filters = new[]
            {
                new Aws.Ec2.Inputs.GetSubnetsFilterInputArgs
                {
                    Name = "vpc-id",
                    Values = new[]
                    {
                        selectedVpc.Apply(getVpcResult => getVpcResult.Id),
                    },
                },
            },
            Tags = 
            {
                { "Tier", "private" },
            },
        });
    
        var currentRegion = Aws.GetRegion.Invoke();
    
        var currentCallerIdentity = Aws.GetCallerIdentity.Invoke();
    
        var esSecurityGroup = new Aws.Ec2.SecurityGroup("esSecurityGroup", new()
        {
            Description = "Managed by Pulumi",
            VpcId = selectedVpc.Apply(getVpcResult => getVpcResult.Id),
            Ingress = new[]
            {
                new Aws.Ec2.Inputs.SecurityGroupIngressArgs
                {
                    FromPort = 443,
                    ToPort = 443,
                    Protocol = "tcp",
                    CidrBlocks = new[]
                    {
                        selectedVpc.Apply(getVpcResult => getVpcResult.CidrBlock),
                    },
                },
            },
        });
    
        var esServiceLinkedRole = new Aws.Iam.ServiceLinkedRole("esServiceLinkedRole", new()
        {
            AwsServiceName = "opensearchservice.amazonaws.com",
        });
    
        var esDomain = new Aws.ElasticSearch.Domain("esDomain", new()
        {
            ElasticsearchVersion = "6.3",
            ClusterConfig = new Aws.ElasticSearch.Inputs.DomainClusterConfigArgs
            {
                InstanceType = "m4.large.elasticsearch",
                ZoneAwarenessEnabled = true,
            },
            VpcOptions = new Aws.ElasticSearch.Inputs.DomainVpcOptionsArgs
            {
                SubnetIds = new[]
                {
                    selectedSubnets.Apply(getSubnetsResult => getSubnetsResult.Ids[0]),
                    selectedSubnets.Apply(getSubnetsResult => getSubnetsResult.Ids[1]),
                },
                SecurityGroupIds = new[]
                {
                    esSecurityGroup.Id,
                },
            },
            AdvancedOptions = 
            {
                { "rest.action.multi.allow_explicit_index", "true" },
            },
            AccessPolicies = Output.Tuple(currentRegion, currentCallerIdentity).Apply(values =>
            {
                var currentRegion = values.Item1;
                var currentCallerIdentity = values.Item2;
                return @$"{{
    	""Version"": ""2012-10-17"",
    	""Statement"": [
    		{{
    			""Action"": ""es:*"",
    			""Principal"": ""*"",
    			""Effect"": ""Allow"",
    			""Resource"": ""arn:aws:es:{currentRegion.Apply(getRegionResult => getRegionResult.Name)}:{currentCallerIdentity.Apply(getCallerIdentityResult => getCallerIdentityResult.AccountId)}:domain/{domain}/*""
    		}}
    	]
    }}
    ";
            }),
            Tags = 
            {
                { "Domain", "TestDomain" },
            },
        }, new CustomResourceOptions
        {
            DependsOn = new[]
            {
                esServiceLinkedRole,
            },
        });
    
    });
    
    package main
    
    import (
    	"fmt"
    
    	"github.com/pulumi/pulumi-aws/sdk/v6/go/aws"
    	"github.com/pulumi/pulumi-aws/sdk/v6/go/aws/ec2"
    	"github.com/pulumi/pulumi-aws/sdk/v6/go/aws/elasticsearch"
    	"github.com/pulumi/pulumi-aws/sdk/v6/go/aws/iam"
    	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
    	"github.com/pulumi/pulumi/sdk/v3/go/pulumi/config"
    )
    func main() {
    pulumi.Run(func(ctx *pulumi.Context) error {
    cfg := config.New(ctx, "")
    vpc := cfg.RequireObject("vpc")
    domain := "tf-test";
    if param := cfg.Get("domain"); param != ""{
    domain = param
    }
    selectedVpc, err := ec2.LookupVpc(ctx, &ec2.LookupVpcArgs{
    Tags: interface{}{
    Name: vpc,
    },
    }, nil);
    if err != nil {
    return err
    }
    selectedSubnets, err := ec2.GetSubnets(ctx, &ec2.GetSubnetsArgs{
    Filters: []ec2.GetSubnetsFilter{
    {
    Name: "vpc-id",
    Values: interface{}{
    selectedVpc.Id,
    },
    },
    },
    Tags: map[string]interface{}{
    "Tier": "private",
    },
    }, nil);
    if err != nil {
    return err
    }
    currentRegion, err := aws.GetRegion(ctx, nil, nil);
    if err != nil {
    return err
    }
    currentCallerIdentity, err := aws.GetCallerIdentity(ctx, nil, nil);
    if err != nil {
    return err
    }
    esSecurityGroup, err := ec2.NewSecurityGroup(ctx, "esSecurityGroup", &ec2.SecurityGroupArgs{
    Description: pulumi.String("Managed by Pulumi"),
    VpcId: *pulumi.String(selectedVpc.Id),
    Ingress: ec2.SecurityGroupIngressArray{
    &ec2.SecurityGroupIngressArgs{
    FromPort: pulumi.Int(443),
    ToPort: pulumi.Int(443),
    Protocol: pulumi.String("tcp"),
    CidrBlocks: pulumi.StringArray{
    *pulumi.String(selectedVpc.CidrBlock),
    },
    },
    },
    })
    if err != nil {
    return err
    }
    esServiceLinkedRole, err := iam.NewServiceLinkedRole(ctx, "esServiceLinkedRole", &iam.ServiceLinkedRoleArgs{
    AwsServiceName: pulumi.String("opensearchservice.amazonaws.com"),
    })
    if err != nil {
    return err
    }
    _, err = elasticsearch.NewDomain(ctx, "esDomain", &elasticsearch.DomainArgs{
    ElasticsearchVersion: pulumi.String("6.3"),
    ClusterConfig: &elasticsearch.DomainClusterConfigArgs{
    InstanceType: pulumi.String("m4.large.elasticsearch"),
    ZoneAwarenessEnabled: pulumi.Bool(true),
    },
    VpcOptions: &elasticsearch.DomainVpcOptionsArgs{
    SubnetIds: pulumi.StringArray{
    *pulumi.String(selectedSubnets.Ids[0]),
    *pulumi.String(selectedSubnets.Ids[1]),
    },
    SecurityGroupIds: pulumi.StringArray{
    esSecurityGroup.ID(),
    },
    },
    AdvancedOptions: pulumi.StringMap{
    "rest.action.multi.allow_explicit_index": pulumi.String("true"),
    },
    AccessPolicies: pulumi.Any(fmt.Sprintf(`{
    	"Version": "2012-10-17",
    	"Statement": [
    		{
    			"Action": "es:*",
    			"Principal": "*",
    			"Effect": "Allow",
    			"Resource": "arn:aws:es:%v:%v:domain/%v/*"
    		}
    	]
    }
    `, currentRegion.Name, currentCallerIdentity.AccountId, domain)),
    Tags: pulumi.StringMap{
    "Domain": pulumi.String("TestDomain"),
    },
    }, pulumi.DependsOn([]pulumi.Resource{
    esServiceLinkedRole,
    }))
    if err != nil {
    return err
    }
    return nil
    })
    }
    
    package generated_program;
    
    import com.pulumi.Context;
    import com.pulumi.Pulumi;
    import com.pulumi.core.Output;
    import com.pulumi.aws.ec2.Ec2Functions;
    import com.pulumi.aws.ec2.inputs.GetVpcArgs;
    import com.pulumi.aws.ec2.inputs.GetSubnetsArgs;
    import com.pulumi.aws.AwsFunctions;
    import com.pulumi.aws.inputs.GetRegionArgs;
    import com.pulumi.aws.inputs.GetCallerIdentityArgs;
    import com.pulumi.aws.ec2.SecurityGroup;
    import com.pulumi.aws.ec2.SecurityGroupArgs;
    import com.pulumi.aws.ec2.inputs.SecurityGroupIngressArgs;
    import com.pulumi.aws.iam.ServiceLinkedRole;
    import com.pulumi.aws.iam.ServiceLinkedRoleArgs;
    import com.pulumi.aws.elasticsearch.Domain;
    import com.pulumi.aws.elasticsearch.DomainArgs;
    import com.pulumi.aws.elasticsearch.inputs.DomainClusterConfigArgs;
    import com.pulumi.aws.elasticsearch.inputs.DomainVpcOptionsArgs;
    import com.pulumi.resources.CustomResourceOptions;
    import java.util.List;
    import java.util.ArrayList;
    import java.util.Map;
    import java.io.File;
    import java.nio.file.Files;
    import java.nio.file.Paths;
    
    public class App {
        public static void main(String[] args) {
            Pulumi.run(App::stack);
        }
    
        public static void stack(Context ctx) {
            final var config = ctx.config();
            final var vpc = config.get("vpc");
            final var domain = config.get("domain").orElse("tf-test");
            final var selectedVpc = Ec2Functions.getVpc(GetVpcArgs.builder()
                .tags(Map.of("Name", vpc))
                .build());
    
            final var selectedSubnets = Ec2Functions.getSubnets(GetSubnetsArgs.builder()
                .filters(GetSubnetsFilterArgs.builder()
                    .name("vpc-id")
                    .values(selectedVpc.applyValue(getVpcResult -> getVpcResult.id()))
                    .build())
                .tags(Map.of("Tier", "private"))
                .build());
    
            final var currentRegion = AwsFunctions.getRegion();
    
            final var currentCallerIdentity = AwsFunctions.getCallerIdentity();
    
            var esSecurityGroup = new SecurityGroup("esSecurityGroup", SecurityGroupArgs.builder()        
                .description("Managed by Pulumi")
                .vpcId(selectedVpc.applyValue(getVpcResult -> getVpcResult.id()))
                .ingress(SecurityGroupIngressArgs.builder()
                    .fromPort(443)
                    .toPort(443)
                    .protocol("tcp")
                    .cidrBlocks(selectedVpc.applyValue(getVpcResult -> getVpcResult.cidrBlock()))
                    .build())
                .build());
    
            var esServiceLinkedRole = new ServiceLinkedRole("esServiceLinkedRole", ServiceLinkedRoleArgs.builder()        
                .awsServiceName("opensearchservice.amazonaws.com")
                .build());
    
            var esDomain = new Domain("esDomain", DomainArgs.builder()        
                .elasticsearchVersion("6.3")
                .clusterConfig(DomainClusterConfigArgs.builder()
                    .instanceType("m4.large.elasticsearch")
                    .zoneAwarenessEnabled(true)
                    .build())
                .vpcOptions(DomainVpcOptionsArgs.builder()
                    .subnetIds(                
                        selectedSubnets.applyValue(getSubnetsResult -> getSubnetsResult.ids()[0]),
                        selectedSubnets.applyValue(getSubnetsResult -> getSubnetsResult.ids()[1]))
                    .securityGroupIds(esSecurityGroup.id())
                    .build())
                .advancedOptions(Map.of("rest.action.multi.allow_explicit_index", "true"))
                .accessPolicies("""
    {
    	"Version": "2012-10-17",
    	"Statement": [
    		{
    			"Action": "es:*",
    			"Principal": "*",
    			"Effect": "Allow",
    			"Resource": "arn:aws:es:%s:%s:domain/%s/*"
    		}
    	]
    }
    ", currentRegion.applyValue(getRegionResult -> getRegionResult.name()),currentCallerIdentity.applyValue(getCallerIdentityResult -> getCallerIdentityResult.accountId()),domain))
                .tags(Map.of("Domain", "TestDomain"))
                .build(), CustomResourceOptions.builder()
                    .dependsOn(esServiceLinkedRole)
                    .build());
    
        }
    }
    
    import pulumi
    import pulumi_aws as aws
    
    config = pulumi.Config()
    vpc = config.require_object("vpc")
    domain = config.get("domain")
    if domain is None:
        domain = "tf-test"
    selected_vpc = aws.ec2.get_vpc(tags={
        "Name": vpc,
    })
    selected_subnets = aws.ec2.get_subnets(filters=[aws.ec2.GetSubnetsFilterArgs(
            name="vpc-id",
            values=[selected_vpc.id],
        )],
        tags={
            "Tier": "private",
        })
    current_region = aws.get_region()
    current_caller_identity = aws.get_caller_identity()
    es_security_group = aws.ec2.SecurityGroup("esSecurityGroup",
        description="Managed by Pulumi",
        vpc_id=selected_vpc.id,
        ingress=[aws.ec2.SecurityGroupIngressArgs(
            from_port=443,
            to_port=443,
            protocol="tcp",
            cidr_blocks=[selected_vpc.cidr_block],
        )])
    es_service_linked_role = aws.iam.ServiceLinkedRole("esServiceLinkedRole", aws_service_name="opensearchservice.amazonaws.com")
    es_domain = aws.elasticsearch.Domain("esDomain",
        elasticsearch_version="6.3",
        cluster_config=aws.elasticsearch.DomainClusterConfigArgs(
            instance_type="m4.large.elasticsearch",
            zone_awareness_enabled=True,
        ),
        vpc_options=aws.elasticsearch.DomainVpcOptionsArgs(
            subnet_ids=[
                selected_subnets.ids[0],
                selected_subnets.ids[1],
            ],
            security_group_ids=[es_security_group.id],
        ),
        advanced_options={
            "rest.action.multi.allow_explicit_index": "true",
        },
        access_policies=f"""{{
    	"Version": "2012-10-17",
    	"Statement": [
    		{{
    			"Action": "es:*",
    			"Principal": "*",
    			"Effect": "Allow",
    			"Resource": "arn:aws:es:{current_region.name}:{current_caller_identity.account_id}:domain/{domain}/*"
    		}}
    	]
    }}
    """,
        tags={
            "Domain": "TestDomain",
        },
        opts=pulumi.ResourceOptions(depends_on=[es_service_linked_role]))
    
    import * as pulumi from "@pulumi/pulumi";
    import * as aws from "@pulumi/aws";
    
    const config = new pulumi.Config();
    const vpc = config.requireObject("vpc");
    const domain = config.get("domain") || "tf-test";
    const selectedVpc = aws.ec2.getVpc({
        tags: {
            Name: vpc,
        },
    });
    const selectedSubnets = selectedVpc.then(selectedVpc => aws.ec2.getSubnets({
        filters: [{
            name: "vpc-id",
            values: [selectedVpc.id],
        }],
        tags: {
            Tier: "private",
        },
    }));
    const currentRegion = aws.getRegion({});
    const currentCallerIdentity = aws.getCallerIdentity({});
    const esSecurityGroup = new aws.ec2.SecurityGroup("esSecurityGroup", {
        description: "Managed by Pulumi",
        vpcId: selectedVpc.then(selectedVpc => selectedVpc.id),
        ingress: [{
            fromPort: 443,
            toPort: 443,
            protocol: "tcp",
            cidrBlocks: [selectedVpc.then(selectedVpc => selectedVpc.cidrBlock)],
        }],
    });
    const esServiceLinkedRole = new aws.iam.ServiceLinkedRole("esServiceLinkedRole", {awsServiceName: "opensearchservice.amazonaws.com"});
    const esDomain = new aws.elasticsearch.Domain("esDomain", {
        elasticsearchVersion: "6.3",
        clusterConfig: {
            instanceType: "m4.large.elasticsearch",
            zoneAwarenessEnabled: true,
        },
        vpcOptions: {
            subnetIds: [
                selectedSubnets.then(selectedSubnets => selectedSubnets.ids?.[0]),
                selectedSubnets.then(selectedSubnets => selectedSubnets.ids?.[1]),
            ],
            securityGroupIds: [esSecurityGroup.id],
        },
        advancedOptions: {
            "rest.action.multi.allow_explicit_index": "true",
        },
        accessPolicies: Promise.all([currentRegion, currentCallerIdentity]).then(([currentRegion, currentCallerIdentity]) => `{
    	"Version": "2012-10-17",
    	"Statement": [
    		{
    			"Action": "es:*",
    			"Principal": "*",
    			"Effect": "Allow",
    			"Resource": "arn:aws:es:${currentRegion.name}:${currentCallerIdentity.accountId}:domain/${domain}/*"
    		}
    	]
    }
    `),
        tags: {
            Domain: "TestDomain",
        },
    }, {
        dependsOn: [esServiceLinkedRole],
    });
    
    configuration:
      vpc:
        type: dynamic
      domain:
        type: string
        default: tf-test
    resources:
      esSecurityGroup:
        type: aws:ec2:SecurityGroup
        properties:
          description: Managed by Pulumi
          vpcId: ${selectedVpc.id}
          ingress:
            - fromPort: 443
              toPort: 443
              protocol: tcp
              cidrBlocks:
                - ${selectedVpc.cidrBlock}
      esServiceLinkedRole:
        type: aws:iam:ServiceLinkedRole
        properties:
          awsServiceName: opensearchservice.amazonaws.com
      esDomain:
        type: aws:elasticsearch:Domain
        properties:
          elasticsearchVersion: '6.3'
          clusterConfig:
            instanceType: m4.large.elasticsearch
            zoneAwarenessEnabled: true
          vpcOptions:
            subnetIds:
              - ${selectedSubnets.ids[0]}
              - ${selectedSubnets.ids[1]}
            securityGroupIds:
              - ${esSecurityGroup.id}
          advancedOptions:
            rest.action.multi.allow_explicit_index: 'true'
          accessPolicies: |
            {
            	"Version": "2012-10-17",
            	"Statement": [
            		{
            			"Action": "es:*",
            			"Principal": "*",
            			"Effect": "Allow",
            			"Resource": "arn:aws:es:${currentRegion.name}:${currentCallerIdentity.accountId}:domain/${domain}/*"
            		}
            	]
            }        
          tags:
            Domain: TestDomain
        options:
          dependson:
            - ${esServiceLinkedRole}
    variables:
      selectedVpc:
        fn::invoke:
          Function: aws:ec2:getVpc
          Arguments:
            tags:
              Name: ${vpc}
      selectedSubnets:
        fn::invoke:
          Function: aws:ec2:getSubnets
          Arguments:
            filters:
              - name: vpc-id
                values:
                  - ${selectedVpc.id}
            tags:
              Tier: private
      currentRegion:
        fn::invoke:
          Function: aws:getRegion
          Arguments: {}
      currentCallerIdentity:
        fn::invoke:
          Function: aws:getCallerIdentity
          Arguments: {}
    

    Create Domain Resource

    new Domain(name: string, args?: DomainArgs, opts?: CustomResourceOptions);
    @overload
    def Domain(resource_name: str,
               opts: Optional[ResourceOptions] = None,
               access_policies: Optional[str] = None,
               advanced_options: Optional[Mapping[str, str]] = None,
               advanced_security_options: Optional[DomainAdvancedSecurityOptionsArgs] = None,
               auto_tune_options: Optional[DomainAutoTuneOptionsArgs] = None,
               cluster_config: Optional[DomainClusterConfigArgs] = None,
               cognito_options: Optional[DomainCognitoOptionsArgs] = None,
               domain_endpoint_options: Optional[DomainDomainEndpointOptionsArgs] = None,
               domain_name: Optional[str] = None,
               ebs_options: Optional[DomainEbsOptionsArgs] = None,
               elasticsearch_version: Optional[str] = None,
               encrypt_at_rest: Optional[DomainEncryptAtRestArgs] = None,
               log_publishing_options: Optional[Sequence[DomainLogPublishingOptionArgs]] = None,
               node_to_node_encryption: Optional[DomainNodeToNodeEncryptionArgs] = None,
               snapshot_options: Optional[DomainSnapshotOptionsArgs] = None,
               tags: Optional[Mapping[str, str]] = None,
               vpc_options: Optional[DomainVpcOptionsArgs] = None)
    @overload
    def Domain(resource_name: str,
               args: Optional[DomainArgs] = None,
               opts: Optional[ResourceOptions] = None)
    func NewDomain(ctx *Context, name string, args *DomainArgs, opts ...ResourceOption) (*Domain, error)
    public Domain(string name, DomainArgs? args = null, CustomResourceOptions? opts = null)
    public Domain(String name, DomainArgs args)
    public Domain(String name, DomainArgs args, CustomResourceOptions options)
    
    type: aws:elasticsearch:Domain
    properties: # The arguments to resource properties.
    options: # Bag of options to control resource's behavior.
    
    
    name string
    The unique name of the resource.
    args DomainArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args DomainArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args DomainArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args DomainArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args DomainArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Domain Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    The Domain resource accepts the following input properties:

    AccessPolicies string | string

    IAM policy document specifying the access policies for the domain.

    AdvancedOptions Dictionary<string, string>

    Key-value string pairs to specify advanced configuration options. Note that the values for these configuration options must be strings (wrapped in quotes) or they may be wrong and cause a perpetual diff, causing the provider to want to recreate your Elasticsearch domain on every apply.

    AdvancedSecurityOptions DomainAdvancedSecurityOptions

    Configuration block for fine-grained access control. Detailed below.

    AutoTuneOptions DomainAutoTuneOptions

    Configuration block for the Auto-Tune options of the domain. Detailed below.

    ClusterConfig DomainClusterConfig

    Configuration block for the cluster of the domain. Detailed below.

    CognitoOptions DomainCognitoOptions

    Configuration block for authenticating Kibana with Cognito. Detailed below.

    DomainEndpointOptions DomainDomainEndpointOptions

    Configuration block for domain endpoint HTTP(S) related options. Detailed below.

    DomainName string

    Name of the domain.

    The following arguments are optional:

    EbsOptions DomainEbsOptions

    Configuration block for EBS related options, may be required based on chosen instance size. Detailed below.

    ElasticsearchVersion string

    Version of Elasticsearch to deploy. Defaults to 1.5.

    EncryptAtRest DomainEncryptAtRest

    Configuration block for encrypt at rest options. Only available for certain instance types. Detailed below.

    LogPublishingOptions List<DomainLogPublishingOption>

    Configuration block for publishing slow and application logs to CloudWatch Logs. This block can be declared multiple times, for each log_type, within the same resource. Detailed below.

    NodeToNodeEncryption DomainNodeToNodeEncryption

    Configuration block for node-to-node encryption options. Detailed below.

    SnapshotOptions DomainSnapshotOptions

    Configuration block for snapshot related options. Detailed below. DEPRECATED. For domains running Elasticsearch 5.3 and later, Amazon ES takes hourly automated snapshots, making this setting irrelevant. For domains running earlier versions of Elasticsearch, Amazon ES takes daily automated snapshots.

    Tags Dictionary<string, string>

    Map of tags to assign to the resource. If configured with a provider default_tags configuration block present, tags with matching keys will overwrite those defined at the provider-level.

    VpcOptions DomainVpcOptions

    Configuration block for VPC related options. Adding or removing this configuration forces a new resource (documentation). Detailed below.

    AccessPolicies string | string

    IAM policy document specifying the access policies for the domain.

    AdvancedOptions map[string]string

    Key-value string pairs to specify advanced configuration options. Note that the values for these configuration options must be strings (wrapped in quotes) or they may be wrong and cause a perpetual diff, causing the provider to want to recreate your Elasticsearch domain on every apply.

    AdvancedSecurityOptions DomainAdvancedSecurityOptionsArgs

    Configuration block for fine-grained access control. Detailed below.

    AutoTuneOptions DomainAutoTuneOptionsArgs

    Configuration block for the Auto-Tune options of the domain. Detailed below.

    ClusterConfig DomainClusterConfigArgs

    Configuration block for the cluster of the domain. Detailed below.

    CognitoOptions DomainCognitoOptionsArgs

    Configuration block for authenticating Kibana with Cognito. Detailed below.

    DomainEndpointOptions DomainDomainEndpointOptionsArgs

    Configuration block for domain endpoint HTTP(S) related options. Detailed below.

    DomainName string

    Name of the domain.

    The following arguments are optional:

    EbsOptions DomainEbsOptionsArgs

    Configuration block for EBS related options, may be required based on chosen instance size. Detailed below.

    ElasticsearchVersion string

    Version of Elasticsearch to deploy. Defaults to 1.5.

    EncryptAtRest DomainEncryptAtRestArgs

    Configuration block for encrypt at rest options. Only available for certain instance types. Detailed below.

    LogPublishingOptions []DomainLogPublishingOptionArgs

    Configuration block for publishing slow and application logs to CloudWatch Logs. This block can be declared multiple times, for each log_type, within the same resource. Detailed below.

    NodeToNodeEncryption DomainNodeToNodeEncryptionArgs

    Configuration block for node-to-node encryption options. Detailed below.

    SnapshotOptions DomainSnapshotOptionsArgs

    Configuration block for snapshot related options. Detailed below. DEPRECATED. For domains running Elasticsearch 5.3 and later, Amazon ES takes hourly automated snapshots, making this setting irrelevant. For domains running earlier versions of Elasticsearch, Amazon ES takes daily automated snapshots.

    Tags map[string]string

    Map of tags to assign to the resource. If configured with a provider default_tags configuration block present, tags with matching keys will overwrite those defined at the provider-level.

    VpcOptions DomainVpcOptionsArgs

    Configuration block for VPC related options. Adding or removing this configuration forces a new resource (documentation). Detailed below.

    accessPolicies String | String

    IAM policy document specifying the access policies for the domain.

    advancedOptions Map<String,String>

    Key-value string pairs to specify advanced configuration options. Note that the values for these configuration options must be strings (wrapped in quotes) or they may be wrong and cause a perpetual diff, causing the provider to want to recreate your Elasticsearch domain on every apply.

    advancedSecurityOptions DomainAdvancedSecurityOptions

    Configuration block for fine-grained access control. Detailed below.

    autoTuneOptions DomainAutoTuneOptions

    Configuration block for the Auto-Tune options of the domain. Detailed below.

    clusterConfig DomainClusterConfig

    Configuration block for the cluster of the domain. Detailed below.

    cognitoOptions DomainCognitoOptions

    Configuration block for authenticating Kibana with Cognito. Detailed below.

    domainEndpointOptions DomainDomainEndpointOptions

    Configuration block for domain endpoint HTTP(S) related options. Detailed below.

    domainName String

    Name of the domain.

    The following arguments are optional:

    ebsOptions DomainEbsOptions

    Configuration block for EBS related options, may be required based on chosen instance size. Detailed below.

    elasticsearchVersion String

    Version of Elasticsearch to deploy. Defaults to 1.5.

    encryptAtRest DomainEncryptAtRest

    Configuration block for encrypt at rest options. Only available for certain instance types. Detailed below.

    logPublishingOptions List<DomainLogPublishingOption>

    Configuration block for publishing slow and application logs to CloudWatch Logs. This block can be declared multiple times, for each log_type, within the same resource. Detailed below.

    nodeToNodeEncryption DomainNodeToNodeEncryption

    Configuration block for node-to-node encryption options. Detailed below.

    snapshotOptions DomainSnapshotOptions

    Configuration block for snapshot related options. Detailed below. DEPRECATED. For domains running Elasticsearch 5.3 and later, Amazon ES takes hourly automated snapshots, making this setting irrelevant. For domains running earlier versions of Elasticsearch, Amazon ES takes daily automated snapshots.

    tags Map<String,String>

    Map of tags to assign to the resource. If configured with a provider default_tags configuration block present, tags with matching keys will overwrite those defined at the provider-level.

    vpcOptions DomainVpcOptions

    Configuration block for VPC related options. Adding or removing this configuration forces a new resource (documentation). Detailed below.

    accessPolicies string | PolicyDocument

    IAM policy document specifying the access policies for the domain.

    advancedOptions {[key: string]: string}

    Key-value string pairs to specify advanced configuration options. Note that the values for these configuration options must be strings (wrapped in quotes) or they may be wrong and cause a perpetual diff, causing the provider to want to recreate your Elasticsearch domain on every apply.

    advancedSecurityOptions DomainAdvancedSecurityOptions

    Configuration block for fine-grained access control. Detailed below.

    autoTuneOptions DomainAutoTuneOptions

    Configuration block for the Auto-Tune options of the domain. Detailed below.

    clusterConfig DomainClusterConfig

    Configuration block for the cluster of the domain. Detailed below.

    cognitoOptions DomainCognitoOptions

    Configuration block for authenticating Kibana with Cognito. Detailed below.

    domainEndpointOptions DomainDomainEndpointOptions

    Configuration block for domain endpoint HTTP(S) related options. Detailed below.

    domainName string

    Name of the domain.

    The following arguments are optional:

    ebsOptions DomainEbsOptions

    Configuration block for EBS related options, may be required based on chosen instance size. Detailed below.

    elasticsearchVersion string

    Version of Elasticsearch to deploy. Defaults to 1.5.

    encryptAtRest DomainEncryptAtRest

    Configuration block for encrypt at rest options. Only available for certain instance types. Detailed below.

    logPublishingOptions DomainLogPublishingOption[]

    Configuration block for publishing slow and application logs to CloudWatch Logs. This block can be declared multiple times, for each log_type, within the same resource. Detailed below.

    nodeToNodeEncryption DomainNodeToNodeEncryption

    Configuration block for node-to-node encryption options. Detailed below.

    snapshotOptions DomainSnapshotOptions

    Configuration block for snapshot related options. Detailed below. DEPRECATED. For domains running Elasticsearch 5.3 and later, Amazon ES takes hourly automated snapshots, making this setting irrelevant. For domains running earlier versions of Elasticsearch, Amazon ES takes daily automated snapshots.

    tags {[key: string]: string}

    Map of tags to assign to the resource. If configured with a provider default_tags configuration block present, tags with matching keys will overwrite those defined at the provider-level.

    vpcOptions DomainVpcOptions

    Configuration block for VPC related options. Adding or removing this configuration forces a new resource (documentation). Detailed below.

    access_policies str | str

    IAM policy document specifying the access policies for the domain.

    advanced_options Mapping[str, str]

    Key-value string pairs to specify advanced configuration options. Note that the values for these configuration options must be strings (wrapped in quotes) or they may be wrong and cause a perpetual diff, causing the provider to want to recreate your Elasticsearch domain on every apply.

    advanced_security_options DomainAdvancedSecurityOptionsArgs

    Configuration block for fine-grained access control. Detailed below.

    auto_tune_options DomainAutoTuneOptionsArgs

    Configuration block for the Auto-Tune options of the domain. Detailed below.

    cluster_config DomainClusterConfigArgs

    Configuration block for the cluster of the domain. Detailed below.

    cognito_options DomainCognitoOptionsArgs

    Configuration block for authenticating Kibana with Cognito. Detailed below.

    domain_endpoint_options DomainDomainEndpointOptionsArgs

    Configuration block for domain endpoint HTTP(S) related options. Detailed below.

    domain_name str

    Name of the domain.

    The following arguments are optional:

    ebs_options DomainEbsOptionsArgs

    Configuration block for EBS related options, may be required based on chosen instance size. Detailed below.

    elasticsearch_version str

    Version of Elasticsearch to deploy. Defaults to 1.5.

    encrypt_at_rest DomainEncryptAtRestArgs

    Configuration block for encrypt at rest options. Only available for certain instance types. Detailed below.

    log_publishing_options Sequence[DomainLogPublishingOptionArgs]

    Configuration block for publishing slow and application logs to CloudWatch Logs. This block can be declared multiple times, for each log_type, within the same resource. Detailed below.

    node_to_node_encryption DomainNodeToNodeEncryptionArgs

    Configuration block for node-to-node encryption options. Detailed below.

    snapshot_options DomainSnapshotOptionsArgs

    Configuration block for snapshot related options. Detailed below. DEPRECATED. For domains running Elasticsearch 5.3 and later, Amazon ES takes hourly automated snapshots, making this setting irrelevant. For domains running earlier versions of Elasticsearch, Amazon ES takes daily automated snapshots.

    tags Mapping[str, str]

    Map of tags to assign to the resource. If configured with a provider default_tags configuration block present, tags with matching keys will overwrite those defined at the provider-level.

    vpc_options DomainVpcOptionsArgs

    Configuration block for VPC related options. Adding or removing this configuration forces a new resource (documentation). Detailed below.

    accessPolicies String |

    IAM policy document specifying the access policies for the domain.

    advancedOptions Map<String>

    Key-value string pairs to specify advanced configuration options. Note that the values for these configuration options must be strings (wrapped in quotes) or they may be wrong and cause a perpetual diff, causing the provider to want to recreate your Elasticsearch domain on every apply.

    advancedSecurityOptions Property Map

    Configuration block for fine-grained access control. Detailed below.

    autoTuneOptions Property Map

    Configuration block for the Auto-Tune options of the domain. Detailed below.

    clusterConfig Property Map

    Configuration block for the cluster of the domain. Detailed below.

    cognitoOptions Property Map

    Configuration block for authenticating Kibana with Cognito. Detailed below.

    domainEndpointOptions Property Map

    Configuration block for domain endpoint HTTP(S) related options. Detailed below.

    domainName String

    Name of the domain.

    The following arguments are optional:

    ebsOptions Property Map

    Configuration block for EBS related options, may be required based on chosen instance size. Detailed below.

    elasticsearchVersion String

    Version of Elasticsearch to deploy. Defaults to 1.5.

    encryptAtRest Property Map

    Configuration block for encrypt at rest options. Only available for certain instance types. Detailed below.

    logPublishingOptions List<Property Map>

    Configuration block for publishing slow and application logs to CloudWatch Logs. This block can be declared multiple times, for each log_type, within the same resource. Detailed below.

    nodeToNodeEncryption Property Map

    Configuration block for node-to-node encryption options. Detailed below.

    snapshotOptions Property Map

    Configuration block for snapshot related options. Detailed below. DEPRECATED. For domains running Elasticsearch 5.3 and later, Amazon ES takes hourly automated snapshots, making this setting irrelevant. For domains running earlier versions of Elasticsearch, Amazon ES takes daily automated snapshots.

    tags Map<String>

    Map of tags to assign to the resource. If configured with a provider default_tags configuration block present, tags with matching keys will overwrite those defined at the provider-level.

    vpcOptions Property Map

    Configuration block for VPC related options. Adding or removing this configuration forces a new resource (documentation). Detailed below.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the Domain resource produces the following output properties:

    Arn string

    ARN of the domain.

    DomainId string

    Unique identifier for the domain.

    Endpoint string

    Domain-specific endpoint used to submit index, search, and data upload requests.

    Id string

    The provider-assigned unique ID for this managed resource.

    KibanaEndpoint string

    Domain-specific endpoint for kibana without https scheme.

    TagsAll Dictionary<string, string>

    Map of tags assigned to the resource, including those inherited from the provider default_tags configuration block.

    • vpc_options.0.availability_zones - If the domain was created inside a VPC, the names of the availability zones the configured subnet_ids were created inside.
    • vpc_options.0.vpc_id - If the domain was created inside a VPC, the ID of the VPC.

    Deprecated:

    Please use tags instead.

    Arn string

    ARN of the domain.

    DomainId string

    Unique identifier for the domain.

    Endpoint string

    Domain-specific endpoint used to submit index, search, and data upload requests.

    Id string

    The provider-assigned unique ID for this managed resource.

    KibanaEndpoint string

    Domain-specific endpoint for kibana without https scheme.

    TagsAll map[string]string

    Map of tags assigned to the resource, including those inherited from the provider default_tags configuration block.

    • vpc_options.0.availability_zones - If the domain was created inside a VPC, the names of the availability zones the configured subnet_ids were created inside.
    • vpc_options.0.vpc_id - If the domain was created inside a VPC, the ID of the VPC.

    Deprecated:

    Please use tags instead.

    arn String

    ARN of the domain.

    domainId String

    Unique identifier for the domain.

    endpoint String

    Domain-specific endpoint used to submit index, search, and data upload requests.

    id String

    The provider-assigned unique ID for this managed resource.

    kibanaEndpoint String

    Domain-specific endpoint for kibana without https scheme.

    tagsAll Map<String,String>

    Map of tags assigned to the resource, including those inherited from the provider default_tags configuration block.

    • vpc_options.0.availability_zones - If the domain was created inside a VPC, the names of the availability zones the configured subnet_ids were created inside.
    • vpc_options.0.vpc_id - If the domain was created inside a VPC, the ID of the VPC.

    Deprecated:

    Please use tags instead.

    arn string

    ARN of the domain.

    domainId string

    Unique identifier for the domain.

    endpoint string

    Domain-specific endpoint used to submit index, search, and data upload requests.

    id string

    The provider-assigned unique ID for this managed resource.

    kibanaEndpoint string

    Domain-specific endpoint for kibana without https scheme.

    tagsAll {[key: string]: string}

    Map of tags assigned to the resource, including those inherited from the provider default_tags configuration block.

    • vpc_options.0.availability_zones - If the domain was created inside a VPC, the names of the availability zones the configured subnet_ids were created inside.
    • vpc_options.0.vpc_id - If the domain was created inside a VPC, the ID of the VPC.

    Deprecated:

    Please use tags instead.

    arn str

    ARN of the domain.

    domain_id str

    Unique identifier for the domain.

    endpoint str

    Domain-specific endpoint used to submit index, search, and data upload requests.

    id str

    The provider-assigned unique ID for this managed resource.

    kibana_endpoint str

    Domain-specific endpoint for kibana without https scheme.

    tags_all Mapping[str, str]

    Map of tags assigned to the resource, including those inherited from the provider default_tags configuration block.

    • vpc_options.0.availability_zones - If the domain was created inside a VPC, the names of the availability zones the configured subnet_ids were created inside.
    • vpc_options.0.vpc_id - If the domain was created inside a VPC, the ID of the VPC.

    Deprecated:

    Please use tags instead.

    arn String

    ARN of the domain.

    domainId String

    Unique identifier for the domain.

    endpoint String

    Domain-specific endpoint used to submit index, search, and data upload requests.

    id String

    The provider-assigned unique ID for this managed resource.

    kibanaEndpoint String

    Domain-specific endpoint for kibana without https scheme.

    tagsAll Map<String>

    Map of tags assigned to the resource, including those inherited from the provider default_tags configuration block.

    • vpc_options.0.availability_zones - If the domain was created inside a VPC, the names of the availability zones the configured subnet_ids were created inside.
    • vpc_options.0.vpc_id - If the domain was created inside a VPC, the ID of the VPC.

    Deprecated:

    Please use tags instead.

    Look up Existing Domain Resource

    Get an existing Domain resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: DomainState, opts?: CustomResourceOptions): Domain
    @staticmethod
    def get(resource_name: str,
            id: str,
            opts: Optional[ResourceOptions] = None,
            access_policies: Optional[str] = None,
            advanced_options: Optional[Mapping[str, str]] = None,
            advanced_security_options: Optional[DomainAdvancedSecurityOptionsArgs] = None,
            arn: Optional[str] = None,
            auto_tune_options: Optional[DomainAutoTuneOptionsArgs] = None,
            cluster_config: Optional[DomainClusterConfigArgs] = None,
            cognito_options: Optional[DomainCognitoOptionsArgs] = None,
            domain_endpoint_options: Optional[DomainDomainEndpointOptionsArgs] = None,
            domain_id: Optional[str] = None,
            domain_name: Optional[str] = None,
            ebs_options: Optional[DomainEbsOptionsArgs] = None,
            elasticsearch_version: Optional[str] = None,
            encrypt_at_rest: Optional[DomainEncryptAtRestArgs] = None,
            endpoint: Optional[str] = None,
            kibana_endpoint: Optional[str] = None,
            log_publishing_options: Optional[Sequence[DomainLogPublishingOptionArgs]] = None,
            node_to_node_encryption: Optional[DomainNodeToNodeEncryptionArgs] = None,
            snapshot_options: Optional[DomainSnapshotOptionsArgs] = None,
            tags: Optional[Mapping[str, str]] = None,
            tags_all: Optional[Mapping[str, str]] = None,
            vpc_options: Optional[DomainVpcOptionsArgs] = None) -> Domain
    func GetDomain(ctx *Context, name string, id IDInput, state *DomainState, opts ...ResourceOption) (*Domain, error)
    public static Domain Get(string name, Input<string> id, DomainState? state, CustomResourceOptions? opts = null)
    public static Domain get(String name, Output<String> id, DomainState state, CustomResourceOptions options)
    Resource lookup is not supported in YAML
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    AccessPolicies string | string

    IAM policy document specifying the access policies for the domain.

    AdvancedOptions Dictionary<string, string>

    Key-value string pairs to specify advanced configuration options. Note that the values for these configuration options must be strings (wrapped in quotes) or they may be wrong and cause a perpetual diff, causing the provider to want to recreate your Elasticsearch domain on every apply.

    AdvancedSecurityOptions DomainAdvancedSecurityOptions

    Configuration block for fine-grained access control. Detailed below.

    Arn string

    ARN of the domain.

    AutoTuneOptions DomainAutoTuneOptions

    Configuration block for the Auto-Tune options of the domain. Detailed below.

    ClusterConfig DomainClusterConfig

    Configuration block for the cluster of the domain. Detailed below.

    CognitoOptions DomainCognitoOptions

    Configuration block for authenticating Kibana with Cognito. Detailed below.

    DomainEndpointOptions DomainDomainEndpointOptions

    Configuration block for domain endpoint HTTP(S) related options. Detailed below.

    DomainId string

    Unique identifier for the domain.

    DomainName string

    Name of the domain.

    The following arguments are optional:

    EbsOptions DomainEbsOptions

    Configuration block for EBS related options, may be required based on chosen instance size. Detailed below.

    ElasticsearchVersion string

    Version of Elasticsearch to deploy. Defaults to 1.5.

    EncryptAtRest DomainEncryptAtRest

    Configuration block for encrypt at rest options. Only available for certain instance types. Detailed below.

    Endpoint string

    Domain-specific endpoint used to submit index, search, and data upload requests.

    KibanaEndpoint string

    Domain-specific endpoint for kibana without https scheme.

    LogPublishingOptions List<DomainLogPublishingOption>

    Configuration block for publishing slow and application logs to CloudWatch Logs. This block can be declared multiple times, for each log_type, within the same resource. Detailed below.

    NodeToNodeEncryption DomainNodeToNodeEncryption

    Configuration block for node-to-node encryption options. Detailed below.

    SnapshotOptions DomainSnapshotOptions

    Configuration block for snapshot related options. Detailed below. DEPRECATED. For domains running Elasticsearch 5.3 and later, Amazon ES takes hourly automated snapshots, making this setting irrelevant. For domains running earlier versions of Elasticsearch, Amazon ES takes daily automated snapshots.

    Tags Dictionary<string, string>

    Map of tags to assign to the resource. If configured with a provider default_tags configuration block present, tags with matching keys will overwrite those defined at the provider-level.

    TagsAll Dictionary<string, string>

    Map of tags assigned to the resource, including those inherited from the provider default_tags configuration block.

    • vpc_options.0.availability_zones - If the domain was created inside a VPC, the names of the availability zones the configured subnet_ids were created inside.
    • vpc_options.0.vpc_id - If the domain was created inside a VPC, the ID of the VPC.

    Deprecated:

    Please use tags instead.

    VpcOptions DomainVpcOptions

    Configuration block for VPC related options. Adding or removing this configuration forces a new resource (documentation). Detailed below.

    AccessPolicies string | string

    IAM policy document specifying the access policies for the domain.

    AdvancedOptions map[string]string

    Key-value string pairs to specify advanced configuration options. Note that the values for these configuration options must be strings (wrapped in quotes) or they may be wrong and cause a perpetual diff, causing the provider to want to recreate your Elasticsearch domain on every apply.

    AdvancedSecurityOptions DomainAdvancedSecurityOptionsArgs

    Configuration block for fine-grained access control. Detailed below.

    Arn string

    ARN of the domain.

    AutoTuneOptions DomainAutoTuneOptionsArgs

    Configuration block for the Auto-Tune options of the domain. Detailed below.

    ClusterConfig DomainClusterConfigArgs

    Configuration block for the cluster of the domain. Detailed below.

    CognitoOptions DomainCognitoOptionsArgs

    Configuration block for authenticating Kibana with Cognito. Detailed below.

    DomainEndpointOptions DomainDomainEndpointOptionsArgs

    Configuration block for domain endpoint HTTP(S) related options. Detailed below.

    DomainId string

    Unique identifier for the domain.

    DomainName string

    Name of the domain.

    The following arguments are optional:

    EbsOptions DomainEbsOptionsArgs

    Configuration block for EBS related options, may be required based on chosen instance size. Detailed below.

    ElasticsearchVersion string

    Version of Elasticsearch to deploy. Defaults to 1.5.

    EncryptAtRest DomainEncryptAtRestArgs

    Configuration block for encrypt at rest options. Only available for certain instance types. Detailed below.

    Endpoint string

    Domain-specific endpoint used to submit index, search, and data upload requests.

    KibanaEndpoint string

    Domain-specific endpoint for kibana without https scheme.

    LogPublishingOptions []DomainLogPublishingOptionArgs

    Configuration block for publishing slow and application logs to CloudWatch Logs. This block can be declared multiple times, for each log_type, within the same resource. Detailed below.

    NodeToNodeEncryption DomainNodeToNodeEncryptionArgs

    Configuration block for node-to-node encryption options. Detailed below.

    SnapshotOptions DomainSnapshotOptionsArgs

    Configuration block for snapshot related options. Detailed below. DEPRECATED. For domains running Elasticsearch 5.3 and later, Amazon ES takes hourly automated snapshots, making this setting irrelevant. For domains running earlier versions of Elasticsearch, Amazon ES takes daily automated snapshots.

    Tags map[string]string

    Map of tags to assign to the resource. If configured with a provider default_tags configuration block present, tags with matching keys will overwrite those defined at the provider-level.

    TagsAll map[string]string

    Map of tags assigned to the resource, including those inherited from the provider default_tags configuration block.

    • vpc_options.0.availability_zones - If the domain was created inside a VPC, the names of the availability zones the configured subnet_ids were created inside.
    • vpc_options.0.vpc_id - If the domain was created inside a VPC, the ID of the VPC.

    Deprecated:

    Please use tags instead.

    VpcOptions DomainVpcOptionsArgs

    Configuration block for VPC related options. Adding or removing this configuration forces a new resource (documentation). Detailed below.

    accessPolicies String | String

    IAM policy document specifying the access policies for the domain.

    advancedOptions Map<String,String>

    Key-value string pairs to specify advanced configuration options. Note that the values for these configuration options must be strings (wrapped in quotes) or they may be wrong and cause a perpetual diff, causing the provider to want to recreate your Elasticsearch domain on every apply.

    advancedSecurityOptions DomainAdvancedSecurityOptions

    Configuration block for fine-grained access control. Detailed below.

    arn String

    ARN of the domain.

    autoTuneOptions DomainAutoTuneOptions

    Configuration block for the Auto-Tune options of the domain. Detailed below.

    clusterConfig DomainClusterConfig

    Configuration block for the cluster of the domain. Detailed below.

    cognitoOptions DomainCognitoOptions

    Configuration block for authenticating Kibana with Cognito. Detailed below.

    domainEndpointOptions DomainDomainEndpointOptions

    Configuration block for domain endpoint HTTP(S) related options. Detailed below.

    domainId String

    Unique identifier for the domain.

    domainName String

    Name of the domain.

    The following arguments are optional:

    ebsOptions DomainEbsOptions

    Configuration block for EBS related options, may be required based on chosen instance size. Detailed below.

    elasticsearchVersion String

    Version of Elasticsearch to deploy. Defaults to 1.5.

    encryptAtRest DomainEncryptAtRest

    Configuration block for encrypt at rest options. Only available for certain instance types. Detailed below.

    endpoint String

    Domain-specific endpoint used to submit index, search, and data upload requests.

    kibanaEndpoint String

    Domain-specific endpoint for kibana without https scheme.

    logPublishingOptions List<DomainLogPublishingOption>

    Configuration block for publishing slow and application logs to CloudWatch Logs. This block can be declared multiple times, for each log_type, within the same resource. Detailed below.

    nodeToNodeEncryption DomainNodeToNodeEncryption

    Configuration block for node-to-node encryption options. Detailed below.

    snapshotOptions DomainSnapshotOptions

    Configuration block for snapshot related options. Detailed below. DEPRECATED. For domains running Elasticsearch 5.3 and later, Amazon ES takes hourly automated snapshots, making this setting irrelevant. For domains running earlier versions of Elasticsearch, Amazon ES takes daily automated snapshots.

    tags Map<String,String>

    Map of tags to assign to the resource. If configured with a provider default_tags configuration block present, tags with matching keys will overwrite those defined at the provider-level.

    tagsAll Map<String,String>

    Map of tags assigned to the resource, including those inherited from the provider default_tags configuration block.

    • vpc_options.0.availability_zones - If the domain was created inside a VPC, the names of the availability zones the configured subnet_ids were created inside.
    • vpc_options.0.vpc_id - If the domain was created inside a VPC, the ID of the VPC.

    Deprecated:

    Please use tags instead.

    vpcOptions DomainVpcOptions

    Configuration block for VPC related options. Adding or removing this configuration forces a new resource (documentation). Detailed below.

    accessPolicies string | PolicyDocument

    IAM policy document specifying the access policies for the domain.

    advancedOptions {[key: string]: string}

    Key-value string pairs to specify advanced configuration options. Note that the values for these configuration options must be strings (wrapped in quotes) or they may be wrong and cause a perpetual diff, causing the provider to want to recreate your Elasticsearch domain on every apply.

    advancedSecurityOptions DomainAdvancedSecurityOptions

    Configuration block for fine-grained access control. Detailed below.

    arn string

    ARN of the domain.

    autoTuneOptions DomainAutoTuneOptions

    Configuration block for the Auto-Tune options of the domain. Detailed below.

    clusterConfig DomainClusterConfig

    Configuration block for the cluster of the domain. Detailed below.

    cognitoOptions DomainCognitoOptions

    Configuration block for authenticating Kibana with Cognito. Detailed below.

    domainEndpointOptions DomainDomainEndpointOptions

    Configuration block for domain endpoint HTTP(S) related options. Detailed below.

    domainId string

    Unique identifier for the domain.

    domainName string

    Name of the domain.

    The following arguments are optional:

    ebsOptions DomainEbsOptions

    Configuration block for EBS related options, may be required based on chosen instance size. Detailed below.

    elasticsearchVersion string

    Version of Elasticsearch to deploy. Defaults to 1.5.

    encryptAtRest DomainEncryptAtRest

    Configuration block for encrypt at rest options. Only available for certain instance types. Detailed below.

    endpoint string

    Domain-specific endpoint used to submit index, search, and data upload requests.

    kibanaEndpoint string

    Domain-specific endpoint for kibana without https scheme.

    logPublishingOptions DomainLogPublishingOption[]

    Configuration block for publishing slow and application logs to CloudWatch Logs. This block can be declared multiple times, for each log_type, within the same resource. Detailed below.

    nodeToNodeEncryption DomainNodeToNodeEncryption

    Configuration block for node-to-node encryption options. Detailed below.

    snapshotOptions DomainSnapshotOptions

    Configuration block for snapshot related options. Detailed below. DEPRECATED. For domains running Elasticsearch 5.3 and later, Amazon ES takes hourly automated snapshots, making this setting irrelevant. For domains running earlier versions of Elasticsearch, Amazon ES takes daily automated snapshots.

    tags {[key: string]: string}

    Map of tags to assign to the resource. If configured with a provider default_tags configuration block present, tags with matching keys will overwrite those defined at the provider-level.

    tagsAll {[key: string]: string}

    Map of tags assigned to the resource, including those inherited from the provider default_tags configuration block.

    • vpc_options.0.availability_zones - If the domain was created inside a VPC, the names of the availability zones the configured subnet_ids were created inside.
    • vpc_options.0.vpc_id - If the domain was created inside a VPC, the ID of the VPC.

    Deprecated:

    Please use tags instead.

    vpcOptions DomainVpcOptions

    Configuration block for VPC related options. Adding or removing this configuration forces a new resource (documentation). Detailed below.

    access_policies str | str

    IAM policy document specifying the access policies for the domain.

    advanced_options Mapping[str, str]

    Key-value string pairs to specify advanced configuration options. Note that the values for these configuration options must be strings (wrapped in quotes) or they may be wrong and cause a perpetual diff, causing the provider to want to recreate your Elasticsearch domain on every apply.

    advanced_security_options DomainAdvancedSecurityOptionsArgs

    Configuration block for fine-grained access control. Detailed below.

    arn str

    ARN of the domain.

    auto_tune_options DomainAutoTuneOptionsArgs

    Configuration block for the Auto-Tune options of the domain. Detailed below.

    cluster_config DomainClusterConfigArgs

    Configuration block for the cluster of the domain. Detailed below.

    cognito_options DomainCognitoOptionsArgs

    Configuration block for authenticating Kibana with Cognito. Detailed below.

    domain_endpoint_options DomainDomainEndpointOptionsArgs

    Configuration block for domain endpoint HTTP(S) related options. Detailed below.

    domain_id str

    Unique identifier for the domain.

    domain_name str

    Name of the domain.

    The following arguments are optional:

    ebs_options DomainEbsOptionsArgs

    Configuration block for EBS related options, may be required based on chosen instance size. Detailed below.

    elasticsearch_version str

    Version of Elasticsearch to deploy. Defaults to 1.5.

    encrypt_at_rest DomainEncryptAtRestArgs

    Configuration block for encrypt at rest options. Only available for certain instance types. Detailed below.

    endpoint str

    Domain-specific endpoint used to submit index, search, and data upload requests.

    kibana_endpoint str

    Domain-specific endpoint for kibana without https scheme.

    log_publishing_options Sequence[DomainLogPublishingOptionArgs]

    Configuration block for publishing slow and application logs to CloudWatch Logs. This block can be declared multiple times, for each log_type, within the same resource. Detailed below.

    node_to_node_encryption DomainNodeToNodeEncryptionArgs

    Configuration block for node-to-node encryption options. Detailed below.

    snapshot_options DomainSnapshotOptionsArgs

    Configuration block for snapshot related options. Detailed below. DEPRECATED. For domains running Elasticsearch 5.3 and later, Amazon ES takes hourly automated snapshots, making this setting irrelevant. For domains running earlier versions of Elasticsearch, Amazon ES takes daily automated snapshots.

    tags Mapping[str, str]

    Map of tags to assign to the resource. If configured with a provider default_tags configuration block present, tags with matching keys will overwrite those defined at the provider-level.

    tags_all Mapping[str, str]

    Map of tags assigned to the resource, including those inherited from the provider default_tags configuration block.

    • vpc_options.0.availability_zones - If the domain was created inside a VPC, the names of the availability zones the configured subnet_ids were created inside.
    • vpc_options.0.vpc_id - If the domain was created inside a VPC, the ID of the VPC.

    Deprecated:

    Please use tags instead.

    vpc_options DomainVpcOptionsArgs

    Configuration block for VPC related options. Adding or removing this configuration forces a new resource (documentation). Detailed below.

    accessPolicies String |

    IAM policy document specifying the access policies for the domain.

    advancedOptions Map<String>

    Key-value string pairs to specify advanced configuration options. Note that the values for these configuration options must be strings (wrapped in quotes) or they may be wrong and cause a perpetual diff, causing the provider to want to recreate your Elasticsearch domain on every apply.

    advancedSecurityOptions Property Map

    Configuration block for fine-grained access control. Detailed below.

    arn String

    ARN of the domain.

    autoTuneOptions Property Map

    Configuration block for the Auto-Tune options of the domain. Detailed below.

    clusterConfig Property Map

    Configuration block for the cluster of the domain. Detailed below.

    cognitoOptions Property Map

    Configuration block for authenticating Kibana with Cognito. Detailed below.

    domainEndpointOptions Property Map

    Configuration block for domain endpoint HTTP(S) related options. Detailed below.

    domainId String

    Unique identifier for the domain.

    domainName String

    Name of the domain.

    The following arguments are optional:

    ebsOptions Property Map

    Configuration block for EBS related options, may be required based on chosen instance size. Detailed below.

    elasticsearchVersion String

    Version of Elasticsearch to deploy. Defaults to 1.5.

    encryptAtRest Property Map

    Configuration block for encrypt at rest options. Only available for certain instance types. Detailed below.

    endpoint String

    Domain-specific endpoint used to submit index, search, and data upload requests.

    kibanaEndpoint String

    Domain-specific endpoint for kibana without https scheme.

    logPublishingOptions List<Property Map>

    Configuration block for publishing slow and application logs to CloudWatch Logs. This block can be declared multiple times, for each log_type, within the same resource. Detailed below.

    nodeToNodeEncryption Property Map

    Configuration block for node-to-node encryption options. Detailed below.

    snapshotOptions Property Map

    Configuration block for snapshot related options. Detailed below. DEPRECATED. For domains running Elasticsearch 5.3 and later, Amazon ES takes hourly automated snapshots, making this setting irrelevant. For domains running earlier versions of Elasticsearch, Amazon ES takes daily automated snapshots.

    tags Map<String>

    Map of tags to assign to the resource. If configured with a provider default_tags configuration block present, tags with matching keys will overwrite those defined at the provider-level.

    tagsAll Map<String>

    Map of tags assigned to the resource, including those inherited from the provider default_tags configuration block.

    • vpc_options.0.availability_zones - If the domain was created inside a VPC, the names of the availability zones the configured subnet_ids were created inside.
    • vpc_options.0.vpc_id - If the domain was created inside a VPC, the ID of the VPC.

    Deprecated:

    Please use tags instead.

    vpcOptions Property Map

    Configuration block for VPC related options. Adding or removing this configuration forces a new resource (documentation). Detailed below.

    Supporting Types

    DomainAdvancedSecurityOptions, DomainAdvancedSecurityOptionsArgs

    Enabled bool

    Whether advanced security is enabled.

    InternalUserDatabaseEnabled bool

    Whether the internal user database is enabled. If not set, defaults to false by the AWS API.

    MasterUserOptions DomainAdvancedSecurityOptionsMasterUserOptions

    Configuration block for the main user. Detailed below.

    Enabled bool

    Whether advanced security is enabled.

    InternalUserDatabaseEnabled bool

    Whether the internal user database is enabled. If not set, defaults to false by the AWS API.

    MasterUserOptions DomainAdvancedSecurityOptionsMasterUserOptions

    Configuration block for the main user. Detailed below.

    enabled Boolean

    Whether advanced security is enabled.

    internalUserDatabaseEnabled Boolean

    Whether the internal user database is enabled. If not set, defaults to false by the AWS API.

    masterUserOptions DomainAdvancedSecurityOptionsMasterUserOptions

    Configuration block for the main user. Detailed below.

    enabled boolean

    Whether advanced security is enabled.

    internalUserDatabaseEnabled boolean

    Whether the internal user database is enabled. If not set, defaults to false by the AWS API.

    masterUserOptions DomainAdvancedSecurityOptionsMasterUserOptions

    Configuration block for the main user. Detailed below.

    enabled bool

    Whether advanced security is enabled.

    internal_user_database_enabled bool

    Whether the internal user database is enabled. If not set, defaults to false by the AWS API.

    master_user_options DomainAdvancedSecurityOptionsMasterUserOptions

    Configuration block for the main user. Detailed below.

    enabled Boolean

    Whether advanced security is enabled.

    internalUserDatabaseEnabled Boolean

    Whether the internal user database is enabled. If not set, defaults to false by the AWS API.

    masterUserOptions Property Map

    Configuration block for the main user. Detailed below.

    DomainAdvancedSecurityOptionsMasterUserOptions, DomainAdvancedSecurityOptionsMasterUserOptionsArgs

    MasterUserArn string

    ARN for the main user. Only specify if internal_user_database_enabled is not set or set to false.

    MasterUserName string

    Main user's username, which is stored in the Amazon Elasticsearch Service domain's internal database. Only specify if internal_user_database_enabled is set to true.

    MasterUserPassword string

    Main user's password, which is stored in the Amazon Elasticsearch Service domain's internal database. Only specify if internal_user_database_enabled is set to true.

    MasterUserArn string

    ARN for the main user. Only specify if internal_user_database_enabled is not set or set to false.

    MasterUserName string

    Main user's username, which is stored in the Amazon Elasticsearch Service domain's internal database. Only specify if internal_user_database_enabled is set to true.

    MasterUserPassword string

    Main user's password, which is stored in the Amazon Elasticsearch Service domain's internal database. Only specify if internal_user_database_enabled is set to true.

    masterUserArn String

    ARN for the main user. Only specify if internal_user_database_enabled is not set or set to false.

    masterUserName String

    Main user's username, which is stored in the Amazon Elasticsearch Service domain's internal database. Only specify if internal_user_database_enabled is set to true.

    masterUserPassword String

    Main user's password, which is stored in the Amazon Elasticsearch Service domain's internal database. Only specify if internal_user_database_enabled is set to true.

    masterUserArn string

    ARN for the main user. Only specify if internal_user_database_enabled is not set or set to false.

    masterUserName string

    Main user's username, which is stored in the Amazon Elasticsearch Service domain's internal database. Only specify if internal_user_database_enabled is set to true.

    masterUserPassword string

    Main user's password, which is stored in the Amazon Elasticsearch Service domain's internal database. Only specify if internal_user_database_enabled is set to true.

    master_user_arn str

    ARN for the main user. Only specify if internal_user_database_enabled is not set or set to false.

    master_user_name str

    Main user's username, which is stored in the Amazon Elasticsearch Service domain's internal database. Only specify if internal_user_database_enabled is set to true.

    master_user_password str

    Main user's password, which is stored in the Amazon Elasticsearch Service domain's internal database. Only specify if internal_user_database_enabled is set to true.

    masterUserArn String

    ARN for the main user. Only specify if internal_user_database_enabled is not set or set to false.

    masterUserName String

    Main user's username, which is stored in the Amazon Elasticsearch Service domain's internal database. Only specify if internal_user_database_enabled is set to true.

    masterUserPassword String

    Main user's password, which is stored in the Amazon Elasticsearch Service domain's internal database. Only specify if internal_user_database_enabled is set to true.

    DomainAutoTuneOptions, DomainAutoTuneOptionsArgs

    DesiredState string

    The Auto-Tune desired state for the domain. Valid values: ENABLED or DISABLED.

    MaintenanceSchedules List<DomainAutoTuneOptionsMaintenanceSchedule>

    Configuration block for Auto-Tune maintenance windows. Can be specified multiple times for each maintenance window. Detailed below.

    RollbackOnDisable string

    Whether to roll back to default Auto-Tune settings when disabling Auto-Tune. Valid values: DEFAULT_ROLLBACK or NO_ROLLBACK.

    DesiredState string

    The Auto-Tune desired state for the domain. Valid values: ENABLED or DISABLED.

    MaintenanceSchedules []DomainAutoTuneOptionsMaintenanceSchedule

    Configuration block for Auto-Tune maintenance windows. Can be specified multiple times for each maintenance window. Detailed below.

    RollbackOnDisable string

    Whether to roll back to default Auto-Tune settings when disabling Auto-Tune. Valid values: DEFAULT_ROLLBACK or NO_ROLLBACK.

    desiredState String

    The Auto-Tune desired state for the domain. Valid values: ENABLED or DISABLED.

    maintenanceSchedules List<DomainAutoTuneOptionsMaintenanceSchedule>

    Configuration block for Auto-Tune maintenance windows. Can be specified multiple times for each maintenance window. Detailed below.

    rollbackOnDisable String

    Whether to roll back to default Auto-Tune settings when disabling Auto-Tune. Valid values: DEFAULT_ROLLBACK or NO_ROLLBACK.

    desiredState string

    The Auto-Tune desired state for the domain. Valid values: ENABLED or DISABLED.

    maintenanceSchedules DomainAutoTuneOptionsMaintenanceSchedule[]

    Configuration block for Auto-Tune maintenance windows. Can be specified multiple times for each maintenance window. Detailed below.

    rollbackOnDisable string

    Whether to roll back to default Auto-Tune settings when disabling Auto-Tune. Valid values: DEFAULT_ROLLBACK or NO_ROLLBACK.

    desired_state str

    The Auto-Tune desired state for the domain. Valid values: ENABLED or DISABLED.

    maintenance_schedules Sequence[DomainAutoTuneOptionsMaintenanceSchedule]

    Configuration block for Auto-Tune maintenance windows. Can be specified multiple times for each maintenance window. Detailed below.

    rollback_on_disable str

    Whether to roll back to default Auto-Tune settings when disabling Auto-Tune. Valid values: DEFAULT_ROLLBACK or NO_ROLLBACK.

    desiredState String

    The Auto-Tune desired state for the domain. Valid values: ENABLED or DISABLED.

    maintenanceSchedules List<Property Map>

    Configuration block for Auto-Tune maintenance windows. Can be specified multiple times for each maintenance window. Detailed below.

    rollbackOnDisable String

    Whether to roll back to default Auto-Tune settings when disabling Auto-Tune. Valid values: DEFAULT_ROLLBACK or NO_ROLLBACK.

    DomainAutoTuneOptionsMaintenanceSchedule, DomainAutoTuneOptionsMaintenanceScheduleArgs

    CronExpressionForRecurrence string

    A cron expression specifying the recurrence pattern for an Auto-Tune maintenance schedule.

    Duration DomainAutoTuneOptionsMaintenanceScheduleDuration

    Configuration block for the duration of the Auto-Tune maintenance window. Detailed below.

    StartAt string

    Date and time at which to start the Auto-Tune maintenance schedule in RFC3339 format.

    CronExpressionForRecurrence string

    A cron expression specifying the recurrence pattern for an Auto-Tune maintenance schedule.

    Duration DomainAutoTuneOptionsMaintenanceScheduleDuration

    Configuration block for the duration of the Auto-Tune maintenance window. Detailed below.

    StartAt string

    Date and time at which to start the Auto-Tune maintenance schedule in RFC3339 format.

    cronExpressionForRecurrence String

    A cron expression specifying the recurrence pattern for an Auto-Tune maintenance schedule.

    duration DomainAutoTuneOptionsMaintenanceScheduleDuration

    Configuration block for the duration of the Auto-Tune maintenance window. Detailed below.

    startAt String

    Date and time at which to start the Auto-Tune maintenance schedule in RFC3339 format.

    cronExpressionForRecurrence string

    A cron expression specifying the recurrence pattern for an Auto-Tune maintenance schedule.

    duration DomainAutoTuneOptionsMaintenanceScheduleDuration

    Configuration block for the duration of the Auto-Tune maintenance window. Detailed below.

    startAt string

    Date and time at which to start the Auto-Tune maintenance schedule in RFC3339 format.

    cron_expression_for_recurrence str

    A cron expression specifying the recurrence pattern for an Auto-Tune maintenance schedule.

    duration DomainAutoTuneOptionsMaintenanceScheduleDuration

    Configuration block for the duration of the Auto-Tune maintenance window. Detailed below.

    start_at str

    Date and time at which to start the Auto-Tune maintenance schedule in RFC3339 format.

    cronExpressionForRecurrence String

    A cron expression specifying the recurrence pattern for an Auto-Tune maintenance schedule.

    duration Property Map

    Configuration block for the duration of the Auto-Tune maintenance window. Detailed below.

    startAt String

    Date and time at which to start the Auto-Tune maintenance schedule in RFC3339 format.

    DomainAutoTuneOptionsMaintenanceScheduleDuration, DomainAutoTuneOptionsMaintenanceScheduleDurationArgs

    Unit string

    The unit of time specifying the duration of an Auto-Tune maintenance window. Valid values: HOURS.

    Value int

    An integer specifying the value of the duration of an Auto-Tune maintenance window.

    Unit string

    The unit of time specifying the duration of an Auto-Tune maintenance window. Valid values: HOURS.

    Value int

    An integer specifying the value of the duration of an Auto-Tune maintenance window.

    unit String

    The unit of time specifying the duration of an Auto-Tune maintenance window. Valid values: HOURS.

    value Integer

    An integer specifying the value of the duration of an Auto-Tune maintenance window.

    unit string

    The unit of time specifying the duration of an Auto-Tune maintenance window. Valid values: HOURS.

    value number

    An integer specifying the value of the duration of an Auto-Tune maintenance window.

    unit str

    The unit of time specifying the duration of an Auto-Tune maintenance window. Valid values: HOURS.

    value int

    An integer specifying the value of the duration of an Auto-Tune maintenance window.

    unit String

    The unit of time specifying the duration of an Auto-Tune maintenance window. Valid values: HOURS.

    value Number

    An integer specifying the value of the duration of an Auto-Tune maintenance window.

    DomainClusterConfig, DomainClusterConfigArgs

    ColdStorageOptions DomainClusterConfigColdStorageOptions

    Configuration block containing cold storage configuration. Detailed below.

    DedicatedMasterCount int

    Number of dedicated main nodes in the cluster.

    DedicatedMasterEnabled bool

    Whether dedicated main nodes are enabled for the cluster.

    DedicatedMasterType string

    Instance type of the dedicated main nodes in the cluster.

    InstanceCount int

    Number of instances in the cluster.

    InstanceType string

    Instance type of data nodes in the cluster.

    WarmCount int

    Number of warm nodes in the cluster. Valid values are between 2 and 150. warm_count can be only and must be set when warm_enabled is set to true.

    WarmEnabled bool

    Whether to enable warm storage.

    WarmType string

    Instance type for the Elasticsearch cluster's warm nodes. Valid values are ultrawarm1.medium.elasticsearch, ultrawarm1.large.elasticsearch and ultrawarm1.xlarge.elasticsearch. warm_type can be only and must be set when warm_enabled is set to true.

    ZoneAwarenessConfig DomainClusterConfigZoneAwarenessConfig

    Configuration block containing zone awareness settings. Detailed below.

    ZoneAwarenessEnabled bool

    Whether zone awareness is enabled, set to true for multi-az deployment. To enable awareness with three Availability Zones, the availability_zone_count within the zone_awareness_config must be set to 3.

    ColdStorageOptions DomainClusterConfigColdStorageOptions

    Configuration block containing cold storage configuration. Detailed below.

    DedicatedMasterCount int

    Number of dedicated main nodes in the cluster.

    DedicatedMasterEnabled bool

    Whether dedicated main nodes are enabled for the cluster.

    DedicatedMasterType string

    Instance type of the dedicated main nodes in the cluster.

    InstanceCount int

    Number of instances in the cluster.

    InstanceType string

    Instance type of data nodes in the cluster.

    WarmCount int

    Number of warm nodes in the cluster. Valid values are between 2 and 150. warm_count can be only and must be set when warm_enabled is set to true.

    WarmEnabled bool

    Whether to enable warm storage.

    WarmType string

    Instance type for the Elasticsearch cluster's warm nodes. Valid values are ultrawarm1.medium.elasticsearch, ultrawarm1.large.elasticsearch and ultrawarm1.xlarge.elasticsearch. warm_type can be only and must be set when warm_enabled is set to true.

    ZoneAwarenessConfig DomainClusterConfigZoneAwarenessConfig

    Configuration block containing zone awareness settings. Detailed below.

    ZoneAwarenessEnabled bool

    Whether zone awareness is enabled, set to true for multi-az deployment. To enable awareness with three Availability Zones, the availability_zone_count within the zone_awareness_config must be set to 3.

    coldStorageOptions DomainClusterConfigColdStorageOptions

    Configuration block containing cold storage configuration. Detailed below.

    dedicatedMasterCount Integer

    Number of dedicated main nodes in the cluster.

    dedicatedMasterEnabled Boolean

    Whether dedicated main nodes are enabled for the cluster.

    dedicatedMasterType String

    Instance type of the dedicated main nodes in the cluster.

    instanceCount Integer

    Number of instances in the cluster.

    instanceType String

    Instance type of data nodes in the cluster.

    warmCount Integer

    Number of warm nodes in the cluster. Valid values are between 2 and 150. warm_count can be only and must be set when warm_enabled is set to true.

    warmEnabled Boolean

    Whether to enable warm storage.

    warmType String

    Instance type for the Elasticsearch cluster's warm nodes. Valid values are ultrawarm1.medium.elasticsearch, ultrawarm1.large.elasticsearch and ultrawarm1.xlarge.elasticsearch. warm_type can be only and must be set when warm_enabled is set to true.

    zoneAwarenessConfig DomainClusterConfigZoneAwarenessConfig

    Configuration block containing zone awareness settings. Detailed below.

    zoneAwarenessEnabled Boolean

    Whether zone awareness is enabled, set to true for multi-az deployment. To enable awareness with three Availability Zones, the availability_zone_count within the zone_awareness_config must be set to 3.

    coldStorageOptions DomainClusterConfigColdStorageOptions

    Configuration block containing cold storage configuration. Detailed below.

    dedicatedMasterCount number

    Number of dedicated main nodes in the cluster.

    dedicatedMasterEnabled boolean

    Whether dedicated main nodes are enabled for the cluster.

    dedicatedMasterType string

    Instance type of the dedicated main nodes in the cluster.

    instanceCount number

    Number of instances in the cluster.

    instanceType string

    Instance type of data nodes in the cluster.

    warmCount number

    Number of warm nodes in the cluster. Valid values are between 2 and 150. warm_count can be only and must be set when warm_enabled is set to true.

    warmEnabled boolean

    Whether to enable warm storage.

    warmType string

    Instance type for the Elasticsearch cluster's warm nodes. Valid values are ultrawarm1.medium.elasticsearch, ultrawarm1.large.elasticsearch and ultrawarm1.xlarge.elasticsearch. warm_type can be only and must be set when warm_enabled is set to true.

    zoneAwarenessConfig DomainClusterConfigZoneAwarenessConfig

    Configuration block containing zone awareness settings. Detailed below.

    zoneAwarenessEnabled boolean

    Whether zone awareness is enabled, set to true for multi-az deployment. To enable awareness with three Availability Zones, the availability_zone_count within the zone_awareness_config must be set to 3.

    cold_storage_options DomainClusterConfigColdStorageOptions

    Configuration block containing cold storage configuration. Detailed below.

    dedicated_master_count int

    Number of dedicated main nodes in the cluster.

    dedicated_master_enabled bool

    Whether dedicated main nodes are enabled for the cluster.

    dedicated_master_type str

    Instance type of the dedicated main nodes in the cluster.

    instance_count int

    Number of instances in the cluster.

    instance_type str

    Instance type of data nodes in the cluster.

    warm_count int

    Number of warm nodes in the cluster. Valid values are between 2 and 150. warm_count can be only and must be set when warm_enabled is set to true.

    warm_enabled bool

    Whether to enable warm storage.

    warm_type str

    Instance type for the Elasticsearch cluster's warm nodes. Valid values are ultrawarm1.medium.elasticsearch, ultrawarm1.large.elasticsearch and ultrawarm1.xlarge.elasticsearch. warm_type can be only and must be set when warm_enabled is set to true.

    zone_awareness_config DomainClusterConfigZoneAwarenessConfig

    Configuration block containing zone awareness settings. Detailed below.

    zone_awareness_enabled bool

    Whether zone awareness is enabled, set to true for multi-az deployment. To enable awareness with three Availability Zones, the availability_zone_count within the zone_awareness_config must be set to 3.

    coldStorageOptions Property Map

    Configuration block containing cold storage configuration. Detailed below.

    dedicatedMasterCount Number

    Number of dedicated main nodes in the cluster.

    dedicatedMasterEnabled Boolean

    Whether dedicated main nodes are enabled for the cluster.

    dedicatedMasterType String

    Instance type of the dedicated main nodes in the cluster.

    instanceCount Number

    Number of instances in the cluster.

    instanceType String

    Instance type of data nodes in the cluster.

    warmCount Number

    Number of warm nodes in the cluster. Valid values are between 2 and 150. warm_count can be only and must be set when warm_enabled is set to true.

    warmEnabled Boolean

    Whether to enable warm storage.

    warmType String

    Instance type for the Elasticsearch cluster's warm nodes. Valid values are ultrawarm1.medium.elasticsearch, ultrawarm1.large.elasticsearch and ultrawarm1.xlarge.elasticsearch. warm_type can be only and must be set when warm_enabled is set to true.

    zoneAwarenessConfig Property Map

    Configuration block containing zone awareness settings. Detailed below.

    zoneAwarenessEnabled Boolean

    Whether zone awareness is enabled, set to true for multi-az deployment. To enable awareness with three Availability Zones, the availability_zone_count within the zone_awareness_config must be set to 3.

    DomainClusterConfigColdStorageOptions, DomainClusterConfigColdStorageOptionsArgs

    Enabled bool

    Boolean to enable cold storage for an Elasticsearch domain. Defaults to false. Master and ultrawarm nodes must be enabled for cold storage.

    Enabled bool

    Boolean to enable cold storage for an Elasticsearch domain. Defaults to false. Master and ultrawarm nodes must be enabled for cold storage.

    enabled Boolean

    Boolean to enable cold storage for an Elasticsearch domain. Defaults to false. Master and ultrawarm nodes must be enabled for cold storage.

    enabled boolean

    Boolean to enable cold storage for an Elasticsearch domain. Defaults to false. Master and ultrawarm nodes must be enabled for cold storage.

    enabled bool

    Boolean to enable cold storage for an Elasticsearch domain. Defaults to false. Master and ultrawarm nodes must be enabled for cold storage.

    enabled Boolean

    Boolean to enable cold storage for an Elasticsearch domain. Defaults to false. Master and ultrawarm nodes must be enabled for cold storage.

    DomainClusterConfigZoneAwarenessConfig, DomainClusterConfigZoneAwarenessConfigArgs

    AvailabilityZoneCount int

    Number of Availability Zones for the domain to use with zone_awareness_enabled. Defaults to 2. Valid values: 2 or 3.

    AvailabilityZoneCount int

    Number of Availability Zones for the domain to use with zone_awareness_enabled. Defaults to 2. Valid values: 2 or 3.

    availabilityZoneCount Integer

    Number of Availability Zones for the domain to use with zone_awareness_enabled. Defaults to 2. Valid values: 2 or 3.

    availabilityZoneCount number

    Number of Availability Zones for the domain to use with zone_awareness_enabled. Defaults to 2. Valid values: 2 or 3.

    availability_zone_count int

    Number of Availability Zones for the domain to use with zone_awareness_enabled. Defaults to 2. Valid values: 2 or 3.

    availabilityZoneCount Number

    Number of Availability Zones for the domain to use with zone_awareness_enabled. Defaults to 2. Valid values: 2 or 3.

    DomainCognitoOptions, DomainCognitoOptionsArgs

    IdentityPoolId string

    ID of the Cognito Identity Pool to use.

    RoleArn string

    ARN of the IAM role that has the AmazonESCognitoAccess policy attached.

    UserPoolId string

    ID of the Cognito User Pool to use.

    Enabled bool

    Whether Amazon Cognito authentication with Kibana is enabled or not.

    IdentityPoolId string

    ID of the Cognito Identity Pool to use.

    RoleArn string

    ARN of the IAM role that has the AmazonESCognitoAccess policy attached.

    UserPoolId string

    ID of the Cognito User Pool to use.

    Enabled bool

    Whether Amazon Cognito authentication with Kibana is enabled or not.

    identityPoolId String

    ID of the Cognito Identity Pool to use.

    roleArn String

    ARN of the IAM role that has the AmazonESCognitoAccess policy attached.

    userPoolId String

    ID of the Cognito User Pool to use.

    enabled Boolean

    Whether Amazon Cognito authentication with Kibana is enabled or not.

    identityPoolId string

    ID of the Cognito Identity Pool to use.

    roleArn string

    ARN of the IAM role that has the AmazonESCognitoAccess policy attached.

    userPoolId string

    ID of the Cognito User Pool to use.

    enabled boolean

    Whether Amazon Cognito authentication with Kibana is enabled or not.

    identity_pool_id str

    ID of the Cognito Identity Pool to use.

    role_arn str

    ARN of the IAM role that has the AmazonESCognitoAccess policy attached.

    user_pool_id str

    ID of the Cognito User Pool to use.

    enabled bool

    Whether Amazon Cognito authentication with Kibana is enabled or not.

    identityPoolId String

    ID of the Cognito Identity Pool to use.

    roleArn String

    ARN of the IAM role that has the AmazonESCognitoAccess policy attached.

    userPoolId String

    ID of the Cognito User Pool to use.

    enabled Boolean

    Whether Amazon Cognito authentication with Kibana is enabled or not.

    DomainDomainEndpointOptions, DomainDomainEndpointOptionsArgs

    CustomEndpoint string

    Fully qualified domain for your custom endpoint.

    CustomEndpointCertificateArn string

    ACM certificate ARN for your custom endpoint.

    CustomEndpointEnabled bool

    Whether to enable custom endpoint for the Elasticsearch domain.

    EnforceHttps bool

    Whether or not to require HTTPS. Defaults to true.

    TlsSecurityPolicy string

    Name of the TLS security policy that needs to be applied to the HTTPS endpoint. Valid values: Policy-Min-TLS-1-0-2019-07 and Policy-Min-TLS-1-2-2019-07. The provider will only perform drift detection if a configuration value is provided.

    CustomEndpoint string

    Fully qualified domain for your custom endpoint.

    CustomEndpointCertificateArn string

    ACM certificate ARN for your custom endpoint.

    CustomEndpointEnabled bool

    Whether to enable custom endpoint for the Elasticsearch domain.

    EnforceHttps bool

    Whether or not to require HTTPS. Defaults to true.

    TlsSecurityPolicy string

    Name of the TLS security policy that needs to be applied to the HTTPS endpoint. Valid values: Policy-Min-TLS-1-0-2019-07 and Policy-Min-TLS-1-2-2019-07. The provider will only perform drift detection if a configuration value is provided.

    customEndpoint String

    Fully qualified domain for your custom endpoint.

    customEndpointCertificateArn String

    ACM certificate ARN for your custom endpoint.

    customEndpointEnabled Boolean

    Whether to enable custom endpoint for the Elasticsearch domain.

    enforceHttps Boolean

    Whether or not to require HTTPS. Defaults to true.

    tlsSecurityPolicy String

    Name of the TLS security policy that needs to be applied to the HTTPS endpoint. Valid values: Policy-Min-TLS-1-0-2019-07 and Policy-Min-TLS-1-2-2019-07. The provider will only perform drift detection if a configuration value is provided.

    customEndpoint string

    Fully qualified domain for your custom endpoint.

    customEndpointCertificateArn string

    ACM certificate ARN for your custom endpoint.

    customEndpointEnabled boolean

    Whether to enable custom endpoint for the Elasticsearch domain.

    enforceHttps boolean

    Whether or not to require HTTPS. Defaults to true.

    tlsSecurityPolicy string

    Name of the TLS security policy that needs to be applied to the HTTPS endpoint. Valid values: Policy-Min-TLS-1-0-2019-07 and Policy-Min-TLS-1-2-2019-07. The provider will only perform drift detection if a configuration value is provided.

    custom_endpoint str

    Fully qualified domain for your custom endpoint.

    custom_endpoint_certificate_arn str

    ACM certificate ARN for your custom endpoint.

    custom_endpoint_enabled bool

    Whether to enable custom endpoint for the Elasticsearch domain.

    enforce_https bool

    Whether or not to require HTTPS. Defaults to true.

    tls_security_policy str

    Name of the TLS security policy that needs to be applied to the HTTPS endpoint. Valid values: Policy-Min-TLS-1-0-2019-07 and Policy-Min-TLS-1-2-2019-07. The provider will only perform drift detection if a configuration value is provided.

    customEndpoint String

    Fully qualified domain for your custom endpoint.

    customEndpointCertificateArn String

    ACM certificate ARN for your custom endpoint.

    customEndpointEnabled Boolean

    Whether to enable custom endpoint for the Elasticsearch domain.

    enforceHttps Boolean

    Whether or not to require HTTPS. Defaults to true.

    tlsSecurityPolicy String

    Name of the TLS security policy that needs to be applied to the HTTPS endpoint. Valid values: Policy-Min-TLS-1-0-2019-07 and Policy-Min-TLS-1-2-2019-07. The provider will only perform drift detection if a configuration value is provided.

    DomainEbsOptions, DomainEbsOptionsArgs

    EbsEnabled bool

    Whether EBS volumes are attached to data nodes in the domain.

    Iops int

    Baseline input/output (I/O) performance of EBS volumes attached to data nodes. Applicable only for the GP3 and Provisioned IOPS EBS volume types.

    Throughput int

    Specifies the throughput (in MiB/s) of the EBS volumes attached to data nodes. Applicable only for the gp3 volume type.

    VolumeSize int

    Size of EBS volumes attached to data nodes (in GiB).

    VolumeType string

    Type of EBS volumes attached to data nodes.

    EbsEnabled bool

    Whether EBS volumes are attached to data nodes in the domain.

    Iops int

    Baseline input/output (I/O) performance of EBS volumes attached to data nodes. Applicable only for the GP3 and Provisioned IOPS EBS volume types.

    Throughput int

    Specifies the throughput (in MiB/s) of the EBS volumes attached to data nodes. Applicable only for the gp3 volume type.

    VolumeSize int

    Size of EBS volumes attached to data nodes (in GiB).

    VolumeType string

    Type of EBS volumes attached to data nodes.

    ebsEnabled Boolean

    Whether EBS volumes are attached to data nodes in the domain.

    iops Integer

    Baseline input/output (I/O) performance of EBS volumes attached to data nodes. Applicable only for the GP3 and Provisioned IOPS EBS volume types.

    throughput Integer

    Specifies the throughput (in MiB/s) of the EBS volumes attached to data nodes. Applicable only for the gp3 volume type.

    volumeSize Integer

    Size of EBS volumes attached to data nodes (in GiB).

    volumeType String

    Type of EBS volumes attached to data nodes.

    ebsEnabled boolean

    Whether EBS volumes are attached to data nodes in the domain.

    iops number

    Baseline input/output (I/O) performance of EBS volumes attached to data nodes. Applicable only for the GP3 and Provisioned IOPS EBS volume types.

    throughput number

    Specifies the throughput (in MiB/s) of the EBS volumes attached to data nodes. Applicable only for the gp3 volume type.

    volumeSize number

    Size of EBS volumes attached to data nodes (in GiB).

    volumeType string

    Type of EBS volumes attached to data nodes.

    ebs_enabled bool

    Whether EBS volumes are attached to data nodes in the domain.

    iops int

    Baseline input/output (I/O) performance of EBS volumes attached to data nodes. Applicable only for the GP3 and Provisioned IOPS EBS volume types.

    throughput int

    Specifies the throughput (in MiB/s) of the EBS volumes attached to data nodes. Applicable only for the gp3 volume type.

    volume_size int

    Size of EBS volumes attached to data nodes (in GiB).

    volume_type str

    Type of EBS volumes attached to data nodes.

    ebsEnabled Boolean

    Whether EBS volumes are attached to data nodes in the domain.

    iops Number

    Baseline input/output (I/O) performance of EBS volumes attached to data nodes. Applicable only for the GP3 and Provisioned IOPS EBS volume types.

    throughput Number

    Specifies the throughput (in MiB/s) of the EBS volumes attached to data nodes. Applicable only for the gp3 volume type.

    volumeSize Number

    Size of EBS volumes attached to data nodes (in GiB).

    volumeType String

    Type of EBS volumes attached to data nodes.

    DomainEncryptAtRest, DomainEncryptAtRestArgs

    Enabled bool

    Whether to enable encryption at rest. If the encrypt_at_rest block is not provided then this defaults to false. Enabling encryption on new domains requires elasticsearch_version 5.1 or greater.

    KmsKeyId string

    KMS key ARN to encrypt the Elasticsearch domain with. If not specified then it defaults to using the aws/es service KMS key. Note that KMS will accept a KMS key ID but will return the key ARN. To prevent the provider detecting unwanted changes, use the key ARN instead.

    Enabled bool

    Whether to enable encryption at rest. If the encrypt_at_rest block is not provided then this defaults to false. Enabling encryption on new domains requires elasticsearch_version 5.1 or greater.

    KmsKeyId string

    KMS key ARN to encrypt the Elasticsearch domain with. If not specified then it defaults to using the aws/es service KMS key. Note that KMS will accept a KMS key ID but will return the key ARN. To prevent the provider detecting unwanted changes, use the key ARN instead.

    enabled Boolean

    Whether to enable encryption at rest. If the encrypt_at_rest block is not provided then this defaults to false. Enabling encryption on new domains requires elasticsearch_version 5.1 or greater.

    kmsKeyId String

    KMS key ARN to encrypt the Elasticsearch domain with. If not specified then it defaults to using the aws/es service KMS key. Note that KMS will accept a KMS key ID but will return the key ARN. To prevent the provider detecting unwanted changes, use the key ARN instead.

    enabled boolean

    Whether to enable encryption at rest. If the encrypt_at_rest block is not provided then this defaults to false. Enabling encryption on new domains requires elasticsearch_version 5.1 or greater.

    kmsKeyId string

    KMS key ARN to encrypt the Elasticsearch domain with. If not specified then it defaults to using the aws/es service KMS key. Note that KMS will accept a KMS key ID but will return the key ARN. To prevent the provider detecting unwanted changes, use the key ARN instead.

    enabled bool

    Whether to enable encryption at rest. If the encrypt_at_rest block is not provided then this defaults to false. Enabling encryption on new domains requires elasticsearch_version 5.1 or greater.

    kms_key_id str

    KMS key ARN to encrypt the Elasticsearch domain with. If not specified then it defaults to using the aws/es service KMS key. Note that KMS will accept a KMS key ID but will return the key ARN. To prevent the provider detecting unwanted changes, use the key ARN instead.

    enabled Boolean

    Whether to enable encryption at rest. If the encrypt_at_rest block is not provided then this defaults to false. Enabling encryption on new domains requires elasticsearch_version 5.1 or greater.

    kmsKeyId String

    KMS key ARN to encrypt the Elasticsearch domain with. If not specified then it defaults to using the aws/es service KMS key. Note that KMS will accept a KMS key ID but will return the key ARN. To prevent the provider detecting unwanted changes, use the key ARN instead.

    DomainLogPublishingOption, DomainLogPublishingOptionArgs

    CloudwatchLogGroupArn string

    ARN of the Cloudwatch log group to which log needs to be published.

    LogType string

    Type of Elasticsearch log. Valid values: INDEX_SLOW_LOGS, SEARCH_SLOW_LOGS, ES_APPLICATION_LOGS, AUDIT_LOGS.

    Enabled bool

    Whether given log publishing option is enabled or not.

    CloudwatchLogGroupArn string

    ARN of the Cloudwatch log group to which log needs to be published.

    LogType string

    Type of Elasticsearch log. Valid values: INDEX_SLOW_LOGS, SEARCH_SLOW_LOGS, ES_APPLICATION_LOGS, AUDIT_LOGS.

    Enabled bool

    Whether given log publishing option is enabled or not.

    cloudwatchLogGroupArn String

    ARN of the Cloudwatch log group to which log needs to be published.

    logType String

    Type of Elasticsearch log. Valid values: INDEX_SLOW_LOGS, SEARCH_SLOW_LOGS, ES_APPLICATION_LOGS, AUDIT_LOGS.

    enabled Boolean

    Whether given log publishing option is enabled or not.

    cloudwatchLogGroupArn string

    ARN of the Cloudwatch log group to which log needs to be published.

    logType string

    Type of Elasticsearch log. Valid values: INDEX_SLOW_LOGS, SEARCH_SLOW_LOGS, ES_APPLICATION_LOGS, AUDIT_LOGS.

    enabled boolean

    Whether given log publishing option is enabled or not.

    cloudwatch_log_group_arn str

    ARN of the Cloudwatch log group to which log needs to be published.

    log_type str

    Type of Elasticsearch log. Valid values: INDEX_SLOW_LOGS, SEARCH_SLOW_LOGS, ES_APPLICATION_LOGS, AUDIT_LOGS.

    enabled bool

    Whether given log publishing option is enabled or not.

    cloudwatchLogGroupArn String

    ARN of the Cloudwatch log group to which log needs to be published.

    logType String

    Type of Elasticsearch log. Valid values: INDEX_SLOW_LOGS, SEARCH_SLOW_LOGS, ES_APPLICATION_LOGS, AUDIT_LOGS.

    enabled Boolean

    Whether given log publishing option is enabled or not.

    DomainNodeToNodeEncryption, DomainNodeToNodeEncryptionArgs

    Enabled bool

    Whether to enable node-to-node encryption. If the node_to_node_encryption block is not provided then this defaults to false. Enabling node-to-node encryption of a new domain requires an elasticsearch_version of 6.0 or greater.

    Enabled bool

    Whether to enable node-to-node encryption. If the node_to_node_encryption block is not provided then this defaults to false. Enabling node-to-node encryption of a new domain requires an elasticsearch_version of 6.0 or greater.

    enabled Boolean

    Whether to enable node-to-node encryption. If the node_to_node_encryption block is not provided then this defaults to false. Enabling node-to-node encryption of a new domain requires an elasticsearch_version of 6.0 or greater.

    enabled boolean

    Whether to enable node-to-node encryption. If the node_to_node_encryption block is not provided then this defaults to false. Enabling node-to-node encryption of a new domain requires an elasticsearch_version of 6.0 or greater.

    enabled bool

    Whether to enable node-to-node encryption. If the node_to_node_encryption block is not provided then this defaults to false. Enabling node-to-node encryption of a new domain requires an elasticsearch_version of 6.0 or greater.

    enabled Boolean

    Whether to enable node-to-node encryption. If the node_to_node_encryption block is not provided then this defaults to false. Enabling node-to-node encryption of a new domain requires an elasticsearch_version of 6.0 or greater.

    DomainSnapshotOptions, DomainSnapshotOptionsArgs

    AutomatedSnapshotStartHour int

    Hour during which the service takes an automated daily snapshot of the indices in the domain.

    AutomatedSnapshotStartHour int

    Hour during which the service takes an automated daily snapshot of the indices in the domain.

    automatedSnapshotStartHour Integer

    Hour during which the service takes an automated daily snapshot of the indices in the domain.

    automatedSnapshotStartHour number

    Hour during which the service takes an automated daily snapshot of the indices in the domain.

    automated_snapshot_start_hour int

    Hour during which the service takes an automated daily snapshot of the indices in the domain.

    automatedSnapshotStartHour Number

    Hour during which the service takes an automated daily snapshot of the indices in the domain.

    DomainVpcOptions, DomainVpcOptionsArgs

    AvailabilityZones List<string>
    SecurityGroupIds List<string>

    List of VPC Security Group IDs to be applied to the Elasticsearch domain endpoints. If omitted, the default Security Group for the VPC will be used.

    SubnetIds List<string>

    List of VPC Subnet IDs for the Elasticsearch domain endpoints to be created in.

    VpcId string
    AvailabilityZones []string
    SecurityGroupIds []string

    List of VPC Security Group IDs to be applied to the Elasticsearch domain endpoints. If omitted, the default Security Group for the VPC will be used.

    SubnetIds []string

    List of VPC Subnet IDs for the Elasticsearch domain endpoints to be created in.

    VpcId string
    availabilityZones List<String>
    securityGroupIds List<String>

    List of VPC Security Group IDs to be applied to the Elasticsearch domain endpoints. If omitted, the default Security Group for the VPC will be used.

    subnetIds List<String>

    List of VPC Subnet IDs for the Elasticsearch domain endpoints to be created in.

    vpcId String
    availabilityZones string[]
    securityGroupIds string[]

    List of VPC Security Group IDs to be applied to the Elasticsearch domain endpoints. If omitted, the default Security Group for the VPC will be used.

    subnetIds string[]

    List of VPC Subnet IDs for the Elasticsearch domain endpoints to be created in.

    vpcId string
    availability_zones Sequence[str]
    security_group_ids Sequence[str]

    List of VPC Security Group IDs to be applied to the Elasticsearch domain endpoints. If omitted, the default Security Group for the VPC will be used.

    subnet_ids Sequence[str]

    List of VPC Subnet IDs for the Elasticsearch domain endpoints to be created in.

    vpc_id str
    availabilityZones List<String>
    securityGroupIds List<String>

    List of VPC Security Group IDs to be applied to the Elasticsearch domain endpoints. If omitted, the default Security Group for the VPC will be used.

    subnetIds List<String>

    List of VPC Subnet IDs for the Elasticsearch domain endpoints to be created in.

    vpcId String

    Import

    Using pulumi import, import Elasticsearch domains using the domain_name. For example:

     $ pulumi import aws:elasticsearch/domain:Domain example domain_name
    

    Package Details

    Repository
    AWS Classic pulumi/pulumi-aws
    License
    Apache-2.0
    Notes

    This Pulumi package is based on the aws Terraform Provider.

    aws logo

    Try AWS Native preview for resources not in the classic version.

    AWS Classic v6.4.0 published on Tuesday, Oct 3, 2023 by Pulumi