Documentation ¶
Index ¶
- func CfnDomain_CFN_RESOURCE_TYPE_NAME() *string
- func CfnDomain_IsCfnElement(x interface{}) *bool
- func CfnDomain_IsCfnResource(construct constructs.IConstruct) *bool
- func CfnDomain_IsConstruct(x interface{}) *bool
- func Domain_IsConstruct(x interface{}) *bool
- func Domain_IsResource(construct awscdk.IConstruct) *bool
- func NewCfnDomain_Override(c CfnDomain, scope awscdk.Construct, id *string, props *CfnDomainProps)
- func NewDomain_Override(d Domain, scope constructs.Construct, id *string, props *DomainProps)
- type AdvancedSecurityOptions
- type CapacityConfig
- type CfnDomain
- type CfnDomainProps
- type CfnDomain_AdvancedSecurityOptionsInputProperty
- type CfnDomain_CognitoOptionsProperty
- type CfnDomain_ColdStorageOptionsProperty
- type CfnDomain_DomainEndpointOptionsProperty
- type CfnDomain_EBSOptionsProperty
- type CfnDomain_ElasticsearchClusterConfigProperty
- type CfnDomain_EncryptionAtRestOptionsProperty
- type CfnDomain_LogPublishingOptionProperty
- type CfnDomain_MasterUserOptionsProperty
- type CfnDomain_NodeToNodeEncryptionOptionsProperty
- type CfnDomain_SnapshotOptionsProperty
- type CfnDomain_VPCOptionsProperty
- type CfnDomain_ZoneAwarenessConfigProperty
- type CognitoOptions
- type CustomEndpointOptions
- type Domain
- type DomainAttributes
- type DomainProps
- type EbsOptions
- type ElasticsearchVersion
- func ElasticsearchVersion_Of(version *string) ElasticsearchVersion
- func ElasticsearchVersion_V1_5() ElasticsearchVersion
- func ElasticsearchVersion_V2_3() ElasticsearchVersion
- func ElasticsearchVersion_V5_1() ElasticsearchVersion
- func ElasticsearchVersion_V5_3() ElasticsearchVersion
- func ElasticsearchVersion_V5_5() ElasticsearchVersion
- func ElasticsearchVersion_V5_6() ElasticsearchVersion
- func ElasticsearchVersion_V6_0() ElasticsearchVersion
- func ElasticsearchVersion_V6_2() ElasticsearchVersion
- func ElasticsearchVersion_V6_3() ElasticsearchVersion
- func ElasticsearchVersion_V6_4() ElasticsearchVersion
- func ElasticsearchVersion_V6_5() ElasticsearchVersion
- func ElasticsearchVersion_V6_7() ElasticsearchVersion
- func ElasticsearchVersion_V6_8() ElasticsearchVersion
- func ElasticsearchVersion_V7_1() ElasticsearchVersion
- func ElasticsearchVersion_V7_10() ElasticsearchVersion
- func ElasticsearchVersion_V7_4() ElasticsearchVersion
- func ElasticsearchVersion_V7_7() ElasticsearchVersion
- func ElasticsearchVersion_V7_8() ElasticsearchVersion
- func ElasticsearchVersion_V7_9() ElasticsearchVersion
- type EncryptionAtRestOptions
- type IDomain
- type LoggingOptions
- type TLSSecurityPolicy
- type ZoneAwarenessConfig
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func CfnDomain_CFN_RESOURCE_TYPE_NAME ¶
func CfnDomain_CFN_RESOURCE_TYPE_NAME() *string
func CfnDomain_IsCfnElement ¶
func CfnDomain_IsCfnElement(x interface{}) *bool
Returns `true` if a construct is a stack element (i.e. part of the synthesized cloudformation template).
Uses duck-typing instead of `instanceof` to allow stack elements from different versions of this library to be included in the same stack.
Returns: The construct as a stack element or undefined if it is not a stack element. Experimental.
func CfnDomain_IsCfnResource ¶
func CfnDomain_IsCfnResource(construct constructs.IConstruct) *bool
Check whether the given construct is a CfnResource. Experimental.
func CfnDomain_IsConstruct ¶
func CfnDomain_IsConstruct(x interface{}) *bool
Return whether the given object is a Construct. Experimental.
func Domain_IsConstruct ¶
func Domain_IsConstruct(x interface{}) *bool
Return whether the given object is a Construct. Experimental.
func Domain_IsResource ¶
func Domain_IsResource(construct awscdk.IConstruct) *bool
Check whether the given construct is a Resource. Experimental.
func NewCfnDomain_Override ¶
func NewCfnDomain_Override(c CfnDomain, scope awscdk.Construct, id *string, props *CfnDomainProps)
Create a new `AWS::Elasticsearch::Domain`.
func NewDomain_Override ¶
func NewDomain_Override(d Domain, scope constructs.Construct, id *string, props *DomainProps)
Experimental.
Types ¶
type AdvancedSecurityOptions ¶
type AdvancedSecurityOptions struct { // ARN for the master user. // // Only specify this or masterUserName, but not both. // Experimental. MasterUserArn *string `json:"masterUserArn" yaml:"masterUserArn"` // Username for the master user. // // Only specify this or masterUserArn, but not both. // Experimental. MasterUserName *string `json:"masterUserName" yaml:"masterUserName"` // Password for the master user. // // You can use `SecretValue.plainText` to specify a password in plain text or // use `secretsmanager.Secret.fromSecretAttributes` to reference a secret in // Secrets Manager. // Experimental. MasterUserPassword awscdk.SecretValue `json:"masterUserPassword" yaml:"masterUserPassword"` }
Specifies options for fine-grained access control.
TODO: EXAMPLE
Experimental.
type CapacityConfig ¶
type CapacityConfig struct { // The instance type for your data nodes, such as `m3.medium.elasticsearch`. For valid values, see [Supported Instance Types](https://docs.aws.amazon.com/elasticsearch-service/latest/developerguide/aes-supported-instance-types.html) in the Amazon Elasticsearch Service Developer Guide. // Experimental. DataNodeInstanceType *string `json:"dataNodeInstanceType" yaml:"dataNodeInstanceType"` // The number of data nodes (instances) to use in the Amazon ES domain. // Experimental. DataNodes *float64 `json:"dataNodes" yaml:"dataNodes"` // The hardware configuration of the computer that hosts the dedicated master node, such as `m3.medium.elasticsearch`. For valid values, see [Supported Instance Types] (https://docs.aws.amazon.com/elasticsearch-service/latest/developerguide/aes-supported-instance-types.html) in the Amazon Elasticsearch Service Developer Guide. // Experimental. MasterNodeInstanceType *string `json:"masterNodeInstanceType" yaml:"masterNodeInstanceType"` // The number of instances to use for the master node. // Experimental. MasterNodes *float64 `json:"masterNodes" yaml:"masterNodes"` // The instance type for your UltraWarm node, such as `ultrawarm1.medium.elasticsearch`. For valid values, see [UltraWarm Storage Limits] (https://docs.aws.amazon.com/elasticsearch-service/latest/developerguide/aes-limits.html#limits-ultrawarm) in the Amazon Elasticsearch Service Developer Guide. // Experimental. WarmInstanceType *string `json:"warmInstanceType" yaml:"warmInstanceType"` // The number of UltraWarm nodes (instances) to use in the Amazon ES domain. // Experimental. WarmNodes *float64 `json:"warmNodes" yaml:"warmNodes"` }
Configures the capacity of the cluster such as the instance type and the number of instances.
TODO: EXAMPLE
Experimental.
type CfnDomain ¶
type CfnDomain interface { awscdk.CfnResource awscdk.IInspectable AccessPolicies() interface{} SetAccessPolicies(val interface{}) AdvancedOptions() interface{} SetAdvancedOptions(val interface{}) AdvancedSecurityOptions() interface{} SetAdvancedSecurityOptions(val interface{}) AttrArn() *string AttrDomainEndpoint() *string CfnOptions() awscdk.ICfnResourceOptions CfnProperties() *map[string]interface{} CfnResourceType() *string CognitoOptions() interface{} SetCognitoOptions(val interface{}) CreationStack() *[]*string DomainEndpointOptions() interface{} SetDomainEndpointOptions(val interface{}) DomainName() *string SetDomainName(val *string) EbsOptions() interface{} SetEbsOptions(val interface{}) ElasticsearchClusterConfig() interface{} SetElasticsearchClusterConfig(val interface{}) ElasticsearchVersion() *string SetElasticsearchVersion(val *string) EncryptionAtRestOptions() interface{} SetEncryptionAtRestOptions(val interface{}) LogicalId() *string LogPublishingOptions() interface{} SetLogPublishingOptions(val interface{}) Node() awscdk.ConstructNode NodeToNodeEncryptionOptions() interface{} SetNodeToNodeEncryptionOptions(val interface{}) Ref() *string SnapshotOptions() interface{} SetSnapshotOptions(val interface{}) Stack() awscdk.Stack Tags() awscdk.TagManager UpdatedProperites() *map[string]interface{} VpcOptions() interface{} SetVpcOptions(val interface{}) AddDeletionOverride(path *string) AddDependsOn(target awscdk.CfnResource) AddMetadata(key *string, value interface{}) AddOverride(path *string, value interface{}) AddPropertyDeletionOverride(propertyPath *string) AddPropertyOverride(propertyPath *string, value interface{}) ApplyRemovalPolicy(policy awscdk.RemovalPolicy, options *awscdk.RemovalPolicyOptions) GetAtt(attributeName *string) awscdk.Reference GetMetadata(key *string) interface{} Inspect(inspector awscdk.TreeInspector) OnPrepare() OnSynthesize(session constructs.ISynthesisSession) OnValidate() *[]*string OverrideLogicalId(newLogicalId *string) Prepare() RenderProperties(props *map[string]interface{}) *map[string]interface{} ShouldSynthesize() *bool Synthesize(session awscdk.ISynthesisSession) ToString() *string Validate() *[]*string ValidateProperties(_properties interface{}) }
A CloudFormation `AWS::Elasticsearch::Domain`.
The AWS::Elasticsearch::Domain resource creates an Amazon OpenSearch Service (successor to Amazon Elasticsearch Service) domain.
> The `AWS::Elasticsearch::Domain` resource is being replaced by the [AWS::OpenSearchService::Domain](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-opensearchservice-domain.html) resource. While the legacy Elasticsearch resource and options are still supported, we recommend modifying your existing Cloudformation templates to use the new OpenSearch Service resource, which supports both OpenSearch and legacy Elasticsearch. For instructions to upgrade domains defined within CloudFormation from Elasticsearch to OpenSearch, see [Remarks](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-opensearchservice-domain.html#aws-resource-opensearchservice-domain--remarks) .
TODO: EXAMPLE
func NewCfnDomain ¶
func NewCfnDomain(scope awscdk.Construct, id *string, props *CfnDomainProps) CfnDomain
Create a new `AWS::Elasticsearch::Domain`.
type CfnDomainProps ¶
type CfnDomainProps struct { // An AWS Identity and Access Management ( IAM ) policy document that specifies who can access the OpenSearch Service domain and their permissions. // // For more information, see [Configuring access policies](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/ac.html#ac-creating) in the *Amazon OpenSearch Service Developer Guid* e. AccessPolicies interface{} `json:"accessPolicies" yaml:"accessPolicies"` // Additional options to specify for the OpenSearch Service domain. // // For more information, see [Advanced cluster parameters](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/createupdatedomains.html#createdomain-configure-advanced-options) in the *Amazon OpenSearch Service Developer Guide* . AdvancedOptions interface{} `json:"advancedOptions" yaml:"advancedOptions"` // Specifies options for fine-grained access control. AdvancedSecurityOptions interface{} `json:"advancedSecurityOptions" yaml:"advancedSecurityOptions"` // Configures OpenSearch Service to use Amazon Cognito authentication for OpenSearch Dashboards. CognitoOptions interface{} `json:"cognitoOptions" yaml:"cognitoOptions"` // Specifies additional options for the domain endpoint, such as whether to require HTTPS for all traffic or whether to use a custom endpoint rather than the default endpoint. DomainEndpointOptions interface{} `json:"domainEndpointOptions" yaml:"domainEndpointOptions"` // A name for the OpenSearch Service domain. // // For valid values, see the [DomainName](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/configuration-api.html#configuration-api-datatypes-domainname) data type in the *Amazon OpenSearch Service Developer Guide* . If you don't specify a name, AWS CloudFormation generates a unique physical ID and uses that ID for the domain name. For more information, see [Name Type](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-name.html) . // // > If you specify a name, you cannot perform updates that require replacement of this resource. You can perform updates that require no or some interruption. If you must replace the resource, specify a new name. DomainName *string `json:"domainName" yaml:"domainName"` // The configurations of Amazon Elastic Block Store (Amazon EBS) volumes that are attached to data nodes in the OpenSearch Service domain. // // For more information, see [EBS volume size limits](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/limits.html#ebsresource) in the *Amazon OpenSearch Service Developer Guide* . EbsOptions interface{} `json:"ebsOptions" yaml:"ebsOptions"` // ElasticsearchClusterConfig is a property of the AWS::Elasticsearch::Domain resource that configures the cluster of an Amazon OpenSearch Service domain. ElasticsearchClusterConfig interface{} `json:"elasticsearchClusterConfig" yaml:"elasticsearchClusterConfig"` // The version of Elasticsearch to use, such as 2.3. If not specified, 1.5 is used as the default. For information about the versions that OpenSearch Service supports, see [Supported versions of OpenSearch and Elasticsearch](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/what-is.html#choosing-version) in the *Amazon OpenSearch Service Developer Guide* . // // If you set the [EnableVersionUpgrade](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-updatepolicy.html#cfn-attributes-updatepolicy-upgradeopensearchdomain) update policy to `true` , you can update `ElasticsearchVersion` without interruption. When `EnableVersionUpgrade` is set to `false` , or is not specified, updating `ElasticsearchVersion` results in [replacement](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-replacement) . ElasticsearchVersion *string `json:"elasticsearchVersion" yaml:"elasticsearchVersion"` // Whether the domain should encrypt data at rest, and if so, the AWS Key Management Service key to use. // // See [Encryption of data at rest for Amazon OpenSearch Service](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/encryption-at-rest.html) . EncryptionAtRestOptions interface{} `json:"encryptionAtRestOptions" yaml:"encryptionAtRestOptions"` // An object with one or more of the following keys: `SEARCH_SLOW_LOGS` , `ES_APPLICATION_LOGS` , `INDEX_SLOW_LOGS` , `AUDIT_LOGS` , depending on the types of logs you want to publish. // // Each key needs a valid `LogPublishingOption` value. LogPublishingOptions interface{} `json:"logPublishingOptions" yaml:"logPublishingOptions"` // Specifies whether node-to-node encryption is enabled. // // See [Node-to-node encryption for Amazon OpenSearch Service](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/ntn.html) . NodeToNodeEncryptionOptions interface{} `json:"nodeToNodeEncryptionOptions" yaml:"nodeToNodeEncryptionOptions"` // *DEPRECATED* . // // The automated snapshot configuration for the OpenSearch Service domain indices. SnapshotOptions interface{} `json:"snapshotOptions" yaml:"snapshotOptions"` // An arbitrary set of tags (key–value pairs) to associate with the OpenSearch Service domain. Tags *[]*awscdk.CfnTag `json:"tags" yaml:"tags"` // The virtual private cloud (VPC) configuration for the OpenSearch Service domain. // // For more information, see [Launching your Amazon OpenSearch Service domains within a VPC](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/vpc.html) in the *Amazon OpenSearch Service Developer Guide* . VpcOptions interface{} `json:"vpcOptions" yaml:"vpcOptions"` }
Properties for defining a `CfnDomain`.
TODO: EXAMPLE
type CfnDomain_AdvancedSecurityOptionsInputProperty ¶
type CfnDomain_AdvancedSecurityOptionsInputProperty struct { // True to enable fine-grained access control. // // You must also enable encryption of data at rest and node-to-node encryption. Enabled interface{} `json:"enabled" yaml:"enabled"` // True to enable the internal user database. InternalUserDatabaseEnabled interface{} `json:"internalUserDatabaseEnabled" yaml:"internalUserDatabaseEnabled"` // Specifies information about the master user. MasterUserOptions interface{} `json:"masterUserOptions" yaml:"masterUserOptions"` }
Specifies options for fine-grained access control.
> The `AWS::Elasticsearch::Domain` resource is being replaced by the [AWS::OpenSearchService::Domain](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-opensearchservice-domain.html) resource. While the legacy Elasticsearch resource and options are still supported, we recommend modifying your existing Cloudformation templates to use the new OpenSearch Service resource, which supports both OpenSearch and Elasticsearch. For more information about the service rename, see [New resource types](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/rename.html#rename-resource) in the *Amazon OpenSearch Service Developer Guide* .
TODO: EXAMPLE
type CfnDomain_CognitoOptionsProperty ¶
type CfnDomain_CognitoOptionsProperty struct { // Whether to enable or disable Amazon Cognito authentication for OpenSearch Dashboards. // // See [Amazon Cognito authentication for OpenSearch Dashboards](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/cognito-auth.html) . Enabled interface{} `json:"enabled" yaml:"enabled"` // The Amazon Cognito identity pool ID that you want OpenSearch Service to use for OpenSearch Dashboards authentication. IdentityPoolId *string `json:"identityPoolId" yaml:"identityPoolId"` // The `AmazonESCognitoAccess` role that allows OpenSearch Service to configure your user pool and identity pool. RoleArn *string `json:"roleArn" yaml:"roleArn"` // The Amazon Cognito user pool ID that you want OpenSearch Service to use for OpenSearch Dashboards authentication. UserPoolId *string `json:"userPoolId" yaml:"userPoolId"` }
Configures OpenSearch Service to use Amazon Cognito authentication for OpenSearch Dashboards.
> The `AWS::Elasticsearch::Domain` resource is being replaced by the [AWS::OpenSearchService::Domain](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-opensearchservice-domain.html) resource. While the legacy Elasticsearch resource and options are still supported, we recommend modifying your existing Cloudformation templates to use the new OpenSearch Service resource, which supports both OpenSearch and Elasticsearch. For more information about the service rename, see [New resource types](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/rename.html#rename-resource) in the *Amazon OpenSearch Service Developer Guide* .
TODO: EXAMPLE
type CfnDomain_ColdStorageOptionsProperty ¶
type CfnDomain_ColdStorageOptionsProperty struct { // Whether to enable or disable cold storage on the domain. // // You must enable UltraWarm storage in order to enable cold storage. Enabled interface{} `json:"enabled" yaml:"enabled"` }
Specifies options for cold storage. For more information, see [Cold storage for Amazon Elasticsearch Service](https://docs.aws.amazon.com/elasticsearch-service/latest/developerguide/cold-storage.html) .
> The `AWS::Elasticsearch::Domain` resource is being replaced by the [AWS::OpenSearchService::Domain](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-opensearchservice-domain.html) resource. While the legacy Elasticsearch resource and options are still supported, we recommend modifying your existing Cloudformation templates to use the new OpenSearch Service resource, which supports both OpenSearch and Elasticsearch. For more information about the service rename, see [New resource types](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/rename.html#rename-resource) in the *Amazon OpenSearch Service Developer Guide* .
TODO: EXAMPLE
type CfnDomain_DomainEndpointOptionsProperty ¶
type CfnDomain_DomainEndpointOptionsProperty struct { // The fully qualified URL for your custom endpoint. CustomEndpoint *string `json:"customEndpoint" yaml:"customEndpoint"` // The AWS Certificate Manager ARN for your domain's SSL/TLS certificate. CustomEndpointCertificateArn *string `json:"customEndpointCertificateArn" yaml:"customEndpointCertificateArn"` // True to enable a custom endpoint for the domain. // // If enabled, you must also provide values for `CustomEndpoint` and `CustomEndpointCertificateArn` . CustomEndpointEnabled interface{} `json:"customEndpointEnabled" yaml:"customEndpointEnabled"` // True to require that all traffic to the domain arrive over HTTPS. EnforceHttps interface{} `json:"enforceHttps" yaml:"enforceHttps"` // The minimum TLS version required for traffic to the domain. Valid values are TLS 1.0 (default) or 1.2:. // // - `Policy-Min-TLS-1-0-2019-07` // - `Policy-Min-TLS-1-2-2019-07` TlsSecurityPolicy *string `json:"tlsSecurityPolicy" yaml:"tlsSecurityPolicy"` }
Specifies additional options for the domain endpoint, such as whether to require HTTPS for all traffic or whether to use a custom endpoint rather than the default endpoint.
> The `AWS::Elasticsearch::Domain` resource is being replaced by the [AWS::OpenSearchService::Domain](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-opensearchservice-domain.html) resource. While the legacy Elasticsearch resource and options are still supported, we recommend modifying your existing Cloudformation templates to use the new OpenSearch Service resource, which supports both OpenSearch and Elasticsearch. For more information about the service rename, see [New resource types](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/rename.html#rename-resource) in the *Amazon OpenSearch Service Developer Guide* .
TODO: EXAMPLE
type CfnDomain_EBSOptionsProperty ¶
type CfnDomain_EBSOptionsProperty struct { // Specifies whether Amazon EBS volumes are attached to data nodes in the OpenSearch Service domain. EbsEnabled interface{} `json:"ebsEnabled" yaml:"ebsEnabled"` // The number of I/O operations per second (IOPS) that the volume supports. // // This property applies only to the Provisioned IOPS (SSD) EBS volume type. Iops *float64 `json:"iops" yaml:"iops"` // The size (in GiB) of the EBS volume for each data node. // // The minimum and maximum size of an EBS volume depends on the EBS volume type and the instance type to which it is attached. For more information, see [EBS volume size limits](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/limits.html#ebsresource) in the *Amazon OpenSearch Service Developer Guide* . VolumeSize *float64 `json:"volumeSize" yaml:"volumeSize"` // The EBS volume type to use with the OpenSearch Service domain, such as standard, gp2, or io1. // // For more information about each type, see [Amazon EBS volume types](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/EBSVolumeTypes.html) in the *Amazon EC2 User Guide for Linux Instances* . VolumeType *string `json:"volumeType" yaml:"volumeType"` }
The configurations of Amazon Elastic Block Store (Amazon EBS) volumes that are attached to data nodes in the OpenSearch Service domain.
For more information, see [EBS volume size limits](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/limits.html#ebsresource) in the *Amazon OpenSearch Service Developer Guide* .
> The `AWS::Elasticsearch::Domain` resource is being replaced by the [AWS::OpenSearchService::Domain](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-opensearchservice-domain.html) resource. While the legacy Elasticsearch resource and options are still supported, we recommend modifying your existing Cloudformation templates to use the new OpenSearch Service resource, which supports both OpenSearch and Elasticsearch. For more information about the service rename, see [New resource types](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/rename.html#rename-resource) in the *Amazon OpenSearch Service Developer Guide* .
TODO: EXAMPLE
type CfnDomain_ElasticsearchClusterConfigProperty ¶
type CfnDomain_ElasticsearchClusterConfigProperty struct { // Specifies cold storage options for the domain. ColdStorageOptions interface{} `json:"coldStorageOptions" yaml:"coldStorageOptions"` // The number of instances to use for the master node. // // If you specify this property, you must specify true for the DedicatedMasterEnabled property. DedicatedMasterCount *float64 `json:"dedicatedMasterCount" yaml:"dedicatedMasterCount"` // Indicates whether to use a dedicated master node for the OpenSearch Service domain. // // A dedicated master node is a cluster node that performs cluster management tasks, but doesn't hold data or respond to data upload requests. Dedicated master nodes offload cluster management tasks to increase the stability of your search clusters. See [Dedicated master nodes in Amazon OpenSearch Service](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/managedomains-dedicatedmasternodes.html) . DedicatedMasterEnabled interface{} `json:"dedicatedMasterEnabled" yaml:"dedicatedMasterEnabled"` // The hardware configuration of the computer that hosts the dedicated master node, such as `m3.medium.elasticsearch` . If you specify this property, you must specify true for the `DedicatedMasterEnabled` property. For valid values, see [Supported instance types in Amazon OpenSearch Service](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/supported-instance-types.html) . DedicatedMasterType *string `json:"dedicatedMasterType" yaml:"dedicatedMasterType"` // The number of data nodes (instances) to use in the OpenSearch Service domain. InstanceCount *float64 `json:"instanceCount" yaml:"instanceCount"` // The instance type for your data nodes, such as `m3.medium.elasticsearch` . For valid values, see [Supported instance types in Amazon OpenSearch Service](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/supported-instance-types.html) . InstanceType *string `json:"instanceType" yaml:"instanceType"` // The number of warm nodes in the cluster. WarmCount *float64 `json:"warmCount" yaml:"warmCount"` // Whether to enable warm storage for the cluster. WarmEnabled interface{} `json:"warmEnabled" yaml:"warmEnabled"` // The instance type for the cluster's warm nodes. WarmType *string `json:"warmType" yaml:"warmType"` // Specifies zone awareness configuration options. // // Only use if `ZoneAwarenessEnabled` is `true` . ZoneAwarenessConfig interface{} `json:"zoneAwarenessConfig" yaml:"zoneAwarenessConfig"` // Indicates whether to enable zone awareness for the OpenSearch Service domain. // // When you enable zone awareness, OpenSearch Service allocates the nodes and replica index shards that belong to a cluster across two Availability Zones (AZs) in the same region to prevent data loss and minimize downtime in the event of node or data center failure. Don't enable zone awareness if your cluster has no replica index shards or is a single-node cluster. For more information, see [Configuring a multi-AZ domain in Amazon OpenSearch Service](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/managedomains-multiaz.html) . ZoneAwarenessEnabled interface{} `json:"zoneAwarenessEnabled" yaml:"zoneAwarenessEnabled"` }
The cluster configuration for the OpenSearch Service domain.
You can specify options such as the instance type and the number of instances. For more information, see [Creating and managing Amazon OpenSearch Service domains](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/createupdatedomains.html) in the *Amazon OpenSearch Service Developer Guide* .
> The `AWS::Elasticsearch::Domain` resource is being replaced by the [AWS::OpenSearchService::Domain](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-opensearchservice-domain.html) resource. While the legacy Elasticsearch resource and options are still supported, we recommend modifying your existing Cloudformation templates to use the new OpenSearch Service resource, which supports both OpenSearch and Elasticsearch. For more information about the service rename, see [New resource types](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/rename.html#rename-resource) in the *Amazon OpenSearch Service Developer Guide* .
TODO: EXAMPLE
type CfnDomain_EncryptionAtRestOptionsProperty ¶
type CfnDomain_EncryptionAtRestOptionsProperty struct { // Specify `true` to enable encryption at rest. Enabled interface{} `json:"enabled" yaml:"enabled"` // The KMS key ID. // // Takes the form `1a2a3a4-1a2a-3a4a-5a6a-1a2a3a4a5a6a` . KmsKeyId *string `json:"kmsKeyId" yaml:"kmsKeyId"` }
Whether the domain should encrypt data at rest, and if so, the AWS Key Management Service key to use.
> The `AWS::Elasticsearch::Domain` resource is being replaced by the [AWS::OpenSearchService::Domain](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-opensearchservice-domain.html) resource. While the legacy Elasticsearch resource and options are still supported, we recommend modifying your existing Cloudformation templates to use the new OpenSearch Service resource, which supports both OpenSearch and Elasticsearch. For more information about the service rename, see [New resource types](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/rename.html#rename-resource) in the *Amazon OpenSearch Service Developer Guide* .
TODO: EXAMPLE
type CfnDomain_LogPublishingOptionProperty ¶
type CfnDomain_LogPublishingOptionProperty struct { // Specifies the CloudWatch log group to publish to. CloudWatchLogsLogGroupArn *string `json:"cloudWatchLogsLogGroupArn" yaml:"cloudWatchLogsLogGroupArn"` // If `true` , enables the publishing of logs to CloudWatch. // // Default: `false` . Enabled interface{} `json:"enabled" yaml:"enabled"` }
> The `AWS::Elasticsearch::Domain` resource is being replaced by the [AWS::OpenSearchService::Domain](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-opensearchservice-domain.html) resource. While the legacy Elasticsearch resource and options are still supported, we recommend modifying your existing Cloudformation templates to use the new OpenSearch Service resource, which supports both OpenSearch and Elasticsearch. For more information about the service rename, see [New resource types](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/rename.html#rename-resource) in the *Amazon OpenSearch Service Developer Guide* .
Specifies whether the OpenSearch Service domain publishes the Elasticsearch application, search slow logs, or index slow logs to Amazon CloudWatch. Each option must be an object of name `SEARCH_SLOW_LOGS` , `ES_APPLICATION_LOGS` , `INDEX_SLOW_LOGS` , or `AUDIT_LOGS` depending on the type of logs you want to publish.
If you enable a slow log, you still have to enable the *collection* of slow logs using the Configuration API. To learn more, see [Enabling log publishing ( AWS CLI)](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/createdomain-configure-slow-logs.html#createdomain-configure-slow-logs-cli) .
TODO: EXAMPLE
type CfnDomain_MasterUserOptionsProperty ¶
type CfnDomain_MasterUserOptionsProperty struct { // ARN for the master user. // // Only specify if `InternalUserDatabaseEnabled` is false in `AdvancedSecurityOptions` . MasterUserArn *string `json:"masterUserArn" yaml:"masterUserArn"` // Username for the master user. // // Only specify if `InternalUserDatabaseEnabled` is true in `AdvancedSecurityOptions` . MasterUserName *string `json:"masterUserName" yaml:"masterUserName"` // Password for the master user. // // Only specify if `InternalUserDatabaseEnabled` is true in `AdvancedSecurityOptions` . MasterUserPassword *string `json:"masterUserPassword" yaml:"masterUserPassword"` }
Specifies information about the master user.
> The `AWS::Elasticsearch::Domain` resource is being replaced by the [AWS::OpenSearchService::Domain](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-opensearchservice-domain.html) resource. While the legacy Elasticsearch resource and options are still supported, we recommend modifying your existing Cloudformation templates to use the new OpenSearch Service resource, which supports both OpenSearch and Elasticsearch. For more information about the service rename, see [New resource types](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/rename.html#rename-resource) in the *Amazon OpenSearch Service Developer Guide* .
TODO: EXAMPLE
type CfnDomain_NodeToNodeEncryptionOptionsProperty ¶
type CfnDomain_NodeToNodeEncryptionOptionsProperty struct {
// Specifies whether node-to-node encryption is enabled, as a Boolean.
Enabled interface{} `json:"enabled" yaml:"enabled"`
}
Specifies whether node-to-node encryption is enabled.
> The `AWS::Elasticsearch::Domain` resource is being replaced by the [AWS::OpenSearchService::Domain](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-opensearchservice-domain.html) resource. While the legacy Elasticsearch resource and options are still supported, we recommend modifying your existing Cloudformation templates to use the new OpenSearch Service resource, which supports both OpenSearch and Elasticsearch. For more information about the service rename, see [New resource types](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/rename.html#rename-resource) in the *Amazon OpenSearch Service Developer Guide* .
TODO: EXAMPLE
type CfnDomain_SnapshotOptionsProperty ¶
type CfnDomain_SnapshotOptionsProperty struct { // The hour in UTC during which the service takes an automated daily snapshot of the indices in the OpenSearch Service domain. // // For example, if you specify 0, OpenSearch Service takes an automated snapshot everyday between midnight and 1 am. You can specify a value between 0 and 23. AutomatedSnapshotStartHour *float64 `json:"automatedSnapshotStartHour" yaml:"automatedSnapshotStartHour"` }
> The `AWS::Elasticsearch::Domain` resource is being replaced by the [AWS::OpenSearchService::Domain](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-opensearchservice-domain.html) resource. While the legacy Elasticsearch resource and options are still supported, we recommend modifying your existing Cloudformation templates to use the new OpenSearch Service resource, which supports both OpenSearch and Elasticsearch. For more information about the service rename, see [New resource types](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/rename.html#rename-resource) in the *Amazon OpenSearch Service Developer Guide* .
*DEPRECATED* . For domains running Elasticsearch 5.3 and later, OpenSearch Service takes hourly automated snapshots, making this setting irrelevant. For domains running earlier versions of Elasticsearch, OpenSearch Service takes daily automated snapshots.
The automated snapshot configuration for the OpenSearch Service domain indices.
TODO: EXAMPLE
type CfnDomain_VPCOptionsProperty ¶
type CfnDomain_VPCOptionsProperty struct { // The list of security group IDs that are associated with the VPC endpoints for the domain. // // If you don't provide a security group ID, OpenSearch Service uses the default security group for the VPC. To learn more, see [Security groups for your VPC](https://docs.aws.amazon.com/vpc/latest/userguide/VPC_SecurityGroups.html) in the *Amazon VPC User Guide* . SecurityGroupIds *[]*string `json:"securityGroupIds" yaml:"securityGroupIds"` // Provide one subnet ID for each Availability Zone that your domain uses. // // For example, you must specify three subnet IDs for a three Availability Zone domain. To learn more, see [VPCs and subnets](https://docs.aws.amazon.com/vpc/latest/userguide/VPC_Subnets.html) in the *Amazon VPC User Guide* . SubnetIds *[]*string `json:"subnetIds" yaml:"subnetIds"` }
The virtual private cloud (VPC) configuration for the OpenSearch Service domain.
For more information, see [Launching your Amazon OpenSearch Service domains using a VPC](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/vpc.html) in the *Amazon OpenSearch Service Developer Guide* .
> The `AWS::Elasticsearch::Domain` resource is being replaced by the [AWS::OpenSearchService::Domain](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-opensearchservice-domain.html) resource. While the legacy Elasticsearch resource and options are still supported, we recommend modifying your existing Cloudformation templates to use the new OpenSearch Service resource, which supports both OpenSearch and Elasticsearch. For more information about the service rename, see [New resource types](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/rename.html#rename-resource) in the *Amazon OpenSearch Service Developer Guide* .
TODO: EXAMPLE
type CfnDomain_ZoneAwarenessConfigProperty ¶
type CfnDomain_ZoneAwarenessConfigProperty struct { // If you enabled multiple Availability Zones (AZs), the number of AZs that you want the domain to use. // // Valid values are `2` and `3` . Default is 2. AvailabilityZoneCount *float64 `json:"availabilityZoneCount" yaml:"availabilityZoneCount"` }
Specifies zone awareness configuration options. Only use if `ZoneAwarenessEnabled` is `true` .
> The `AWS::Elasticsearch::Domain` resource is being replaced by the [AWS::OpenSearchService::Domain](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-opensearchservice-domain.html) resource. While the legacy Elasticsearch resource and options are still supported, we recommend modifying your existing Cloudformation templates to use the new OpenSearch Service resource, which supports both OpenSearch and Elasticsearch. For more information about the service rename, see [New resource types](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/rename.html#rename-resource) in the *Amazon OpenSearch Service Developer Guide* .
TODO: EXAMPLE
type CognitoOptions ¶
type CognitoOptions struct { // The Amazon Cognito identity pool ID that you want Amazon ES to use for Kibana authentication. // Experimental. IdentityPoolId *string `json:"identityPoolId" yaml:"identityPoolId"` // A role that allows Amazon ES to configure your user pool and identity pool. // // It must have the `AmazonESCognitoAccess` policy attached to it. // See: https://docs.aws.amazon.com/elasticsearch-service/latest/developerguide/es-cognito-auth.html#es-cognito-auth-prereq // // Experimental. Role awsiam.IRole `json:"role" yaml:"role"` // The Amazon Cognito user pool ID that you want Amazon ES to use for Kibana authentication. // Experimental. UserPoolId *string `json:"userPoolId" yaml:"userPoolId"` }
Configures Amazon ES to use Amazon Cognito authentication for Kibana.
TODO: EXAMPLE
See: https://docs.aws.amazon.com/elasticsearch-service/latest/developerguide/es-cognito-auth.html
Experimental.
type CustomEndpointOptions ¶
type CustomEndpointOptions struct { // The custom domain name to assign. // Experimental. DomainName *string `json:"domainName" yaml:"domainName"` // The certificate to use. // Experimental. Certificate awscertificatemanager.ICertificate `json:"certificate" yaml:"certificate"` // The hosted zone in Route53 to create the CNAME record in. // Experimental. HostedZone awsroute53.IHostedZone `json:"hostedZone" yaml:"hostedZone"` }
Configures a custom domain endpoint for the ES domain.
TODO: EXAMPLE
Experimental.
type Domain ¶
type Domain interface { awscdk.Resource awsec2.IConnectable IDomain AppLogGroup() awslogs.ILogGroup AuditLogGroup() awslogs.ILogGroup Connections() awsec2.Connections DomainArn() *string DomainEndpoint() *string DomainName() *string Env() *awscdk.ResourceEnvironment MasterUserPassword() awscdk.SecretValue Node() awscdk.ConstructNode PhysicalName() *string SlowIndexLogGroup() awslogs.ILogGroup SlowSearchLogGroup() awslogs.ILogGroup Stack() awscdk.Stack ApplyRemovalPolicy(policy awscdk.RemovalPolicy) GeneratePhysicalName() *string GetResourceArnAttribute(arnAttr *string, arnComponents *awscdk.ArnComponents) *string GetResourceNameAttribute(nameAttr *string) *string GrantIndexRead(index *string, identity awsiam.IGrantable) awsiam.Grant GrantIndexReadWrite(index *string, identity awsiam.IGrantable) awsiam.Grant GrantIndexWrite(index *string, identity awsiam.IGrantable) awsiam.Grant GrantPathRead(path *string, identity awsiam.IGrantable) awsiam.Grant GrantPathReadWrite(path *string, identity awsiam.IGrantable) awsiam.Grant GrantPathWrite(path *string, identity awsiam.IGrantable) awsiam.Grant GrantRead(identity awsiam.IGrantable) awsiam.Grant GrantReadWrite(identity awsiam.IGrantable) awsiam.Grant GrantWrite(identity awsiam.IGrantable) awsiam.Grant Metric(metricName *string, props *awscloudwatch.MetricOptions) awscloudwatch.Metric MetricAutomatedSnapshotFailure(props *awscloudwatch.MetricOptions) awscloudwatch.Metric MetricClusterIndexWritesBlocked(props *awscloudwatch.MetricOptions) awscloudwatch.Metric MetricClusterStatusRed(props *awscloudwatch.MetricOptions) awscloudwatch.Metric MetricClusterStatusYellow(props *awscloudwatch.MetricOptions) awscloudwatch.Metric MetricCPUUtilization(props *awscloudwatch.MetricOptions) awscloudwatch.Metric MetricFreeStorageSpace(props *awscloudwatch.MetricOptions) awscloudwatch.Metric MetricIndexingLatency(props *awscloudwatch.MetricOptions) awscloudwatch.Metric MetricJVMMemoryPressure(props *awscloudwatch.MetricOptions) awscloudwatch.Metric MetricKMSKeyError(props *awscloudwatch.MetricOptions) awscloudwatch.Metric MetricKMSKeyInaccessible(props *awscloudwatch.MetricOptions) awscloudwatch.Metric MetricMasterCPUUtilization(props *awscloudwatch.MetricOptions) awscloudwatch.Metric MetricMasterJVMMemoryPressure(props *awscloudwatch.MetricOptions) awscloudwatch.Metric MetricNodes(props *awscloudwatch.MetricOptions) awscloudwatch.Metric MetricSearchableDocuments(props *awscloudwatch.MetricOptions) awscloudwatch.Metric MetricSearchLatency(props *awscloudwatch.MetricOptions) awscloudwatch.Metric OnPrepare() OnSynthesize(session constructs.ISynthesisSession) OnValidate() *[]*string Prepare() Synthesize(session awscdk.ISynthesisSession) ToString() *string Validate() *[]*string }
Provides an Elasticsearch domain.
TODO: EXAMPLE
Experimental.
func NewDomain ¶
func NewDomain(scope constructs.Construct, id *string, props *DomainProps) Domain
Experimental.
type DomainAttributes ¶
type DomainAttributes struct { // The ARN of the Elasticsearch domain. // Experimental. DomainArn *string `json:"domainArn" yaml:"domainArn"` // The domain endpoint of the Elasticsearch domain. // Experimental. DomainEndpoint *string `json:"domainEndpoint" yaml:"domainEndpoint"` }
Reference to an Elasticsearch domain.
TODO: EXAMPLE
Experimental.
type DomainProps ¶
type DomainProps struct { // The Elasticsearch version that your domain will leverage. // Experimental. Version ElasticsearchVersion `json:"version" yaml:"version"` // Domain Access policies. // Experimental. AccessPolicies *[]awsiam.PolicyStatement `json:"accessPolicies" yaml:"accessPolicies"` // Additional options to specify for the Amazon ES domain. // See: https://docs.aws.amazon.com/elasticsearch-service/latest/developerguide/es-createupdatedomains.html#es-createdomain-configure-advanced-options // // Experimental. AdvancedOptions *map[string]*string `json:"advancedOptions" yaml:"advancedOptions"` // The hour in UTC during which the service takes an automated daily snapshot of the indices in the Amazon ES domain. // // Only applies for Elasticsearch // versions below 5.3. // Experimental. AutomatedSnapshotStartHour *float64 `json:"automatedSnapshotStartHour" yaml:"automatedSnapshotStartHour"` // The cluster capacity configuration for the Amazon ES domain. // Experimental. Capacity *CapacityConfig `json:"capacity" yaml:"capacity"` // Configures Amazon ES to use Amazon Cognito authentication for Kibana. // Experimental. CognitoKibanaAuth *CognitoOptions `json:"cognitoKibanaAuth" yaml:"cognitoKibanaAuth"` // To configure a custom domain configure these options. // // If you specify a Route53 hosted zone it will create a CNAME record and use DNS validation for the certificate // Experimental. CustomEndpoint *CustomEndpointOptions `json:"customEndpoint" yaml:"customEndpoint"` // Enforces a particular physical domain name. // Experimental. DomainName *string `json:"domainName" yaml:"domainName"` // The configurations of Amazon Elastic Block Store (Amazon EBS) volumes that are attached to data nodes in the Amazon ES domain. // // For more information, see // [Configuring EBS-based Storage] // (https://docs.aws.amazon.com/elasticsearch-service/latest/developerguide/es-createupdatedomains.html#es-createdomain-configure-ebs) // in the Amazon Elasticsearch Service Developer Guide. // Experimental. Ebs *EbsOptions `json:"ebs" yaml:"ebs"` // To upgrade an Amazon ES domain to a new version of Elasticsearch rather than replacing the entire domain resource, use the EnableVersionUpgrade update policy. // See: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-updatepolicy.html#cfn-attributes-updatepolicy-upgradeelasticsearchdomain // // Experimental. EnableVersionUpgrade *bool `json:"enableVersionUpgrade" yaml:"enableVersionUpgrade"` // Encryption at rest options for the cluster. // Experimental. EncryptionAtRest *EncryptionAtRestOptions `json:"encryptionAtRest" yaml:"encryptionAtRest"` // True to require that all traffic to the domain arrive over HTTPS. // Experimental. EnforceHttps *bool `json:"enforceHttps" yaml:"enforceHttps"` // Specifies options for fine-grained access control. // // Requires Elasticsearch version 6.7 or later. Enabling fine-grained access control // also requires encryption of data at rest and node-to-node encryption, along with // enforced HTTPS. // Experimental. FineGrainedAccessControl *AdvancedSecurityOptions `json:"fineGrainedAccessControl" yaml:"fineGrainedAccessControl"` // Configuration log publishing configuration options. // Experimental. Logging *LoggingOptions `json:"logging" yaml:"logging"` // Specify true to enable node to node encryption. // // Requires Elasticsearch version 6.0 or later. // Experimental. NodeToNodeEncryption *bool `json:"nodeToNodeEncryption" yaml:"nodeToNodeEncryption"` // Policy to apply when the domain is removed from the stack. // Experimental. RemovalPolicy awscdk.RemovalPolicy `json:"removalPolicy" yaml:"removalPolicy"` // The list of security groups that are associated with the VPC endpoints for the domain. // // Only used if `vpc` is specified. // See: https://docs.aws.amazon.com/vpc/latest/userguide/VPC_SecurityGroups.html // // Experimental. SecurityGroups *[]awsec2.ISecurityGroup `json:"securityGroups" yaml:"securityGroups"` // The minimum TLS version required for traffic to the domain. // Experimental. TlsSecurityPolicy TLSSecurityPolicy `json:"tlsSecurityPolicy" yaml:"tlsSecurityPolicy"` // Configures the domain so that unsigned basic auth is enabled. // // If no master user is provided a default master user // with username `admin` and a dynamically generated password stored in KMS is created. The password can be retrieved // by getting `masterUserPassword` from the domain instance. // // Setting this to true will also add an access policy that allows unsigned // access, enable node to node encryption, encryption at rest. If conflicting // settings are encountered (like disabling encryption at rest) enabling this // setting will cause a failure. // Experimental. UseUnsignedBasicAuth *bool `json:"useUnsignedBasicAuth" yaml:"useUnsignedBasicAuth"` // Place the domain inside this VPC. // See: https://docs.aws.amazon.com/elasticsearch-service/latest/developerguide/es-vpc.html // // Experimental. Vpc awsec2.IVpc `json:"vpc" yaml:"vpc"` // The specific vpc subnets the domain will be placed in. // // You must provide one subnet for each Availability Zone // that your domain uses. For example, you must specify three subnet IDs for a three Availability Zone // domain. // // Only used if `vpc` is specified. // See: https://docs.aws.amazon.com/vpc/latest/userguide/VPC_Subnets.html // // Experimental. VpcSubnets *[]*awsec2.SubnetSelection `json:"vpcSubnets" yaml:"vpcSubnets"` // The cluster zone awareness configuration for the Amazon ES domain. // Experimental. ZoneAwareness *ZoneAwarenessConfig `json:"zoneAwareness" yaml:"zoneAwareness"` }
Properties for an AWS Elasticsearch Domain.
TODO: EXAMPLE
Experimental.
type EbsOptions ¶
type EbsOptions struct { // Specifies whether Amazon EBS volumes are attached to data nodes in the Amazon ES domain. // Experimental. Enabled *bool `json:"enabled" yaml:"enabled"` // The number of I/O operations per second (IOPS) that the volume supports. // // This property applies only to the Provisioned IOPS (SSD) EBS // volume type. // Experimental. Iops *float64 `json:"iops" yaml:"iops"` // The size (in GiB) of the EBS volume for each data node. // // The minimum and // maximum size of an EBS volume depends on the EBS volume type and the // instance type to which it is attached. For more information, see // [Configuring EBS-based Storage] // (https://docs.aws.amazon.com/elasticsearch-service/latest/developerguide/es-createupdatedomains.html#es-createdomain-configure-ebs) // in the Amazon Elasticsearch Service Developer Guide. // Experimental. VolumeSize *float64 `json:"volumeSize" yaml:"volumeSize"` // The EBS volume type to use with the Amazon ES domain, such as standard, gp2, io1. // // For more information, see[Configuring EBS-based Storage] // (https://docs.aws.amazon.com/elasticsearch-service/latest/developerguide/es-createupdatedomains.html#es-createdomain-configure-ebs) // in the Amazon Elasticsearch Service Developer Guide. // Experimental. VolumeType awsec2.EbsDeviceVolumeType `json:"volumeType" yaml:"volumeType"` }
The configurations of Amazon Elastic Block Store (Amazon EBS) volumes that are attached to data nodes in the Amazon ES domain.
For more information, see [Configuring EBS-based Storage] (https://docs.aws.amazon.com/elasticsearch-service/latest/developerguide/es-createupdatedomains.html#es-createdomain-configure-ebs) in the Amazon Elasticsearch Service Developer Guide.
TODO: EXAMPLE
Experimental.
type ElasticsearchVersion ¶
type ElasticsearchVersion interface {
Version() *string
}
Elasticsearch version.
TODO: EXAMPLE
Experimental.
func ElasticsearchVersion_Of ¶
func ElasticsearchVersion_Of(version *string) ElasticsearchVersion
Custom Elasticsearch version. Experimental.
func ElasticsearchVersion_V1_5 ¶
func ElasticsearchVersion_V1_5() ElasticsearchVersion
func ElasticsearchVersion_V2_3 ¶
func ElasticsearchVersion_V2_3() ElasticsearchVersion
func ElasticsearchVersion_V5_1 ¶
func ElasticsearchVersion_V5_1() ElasticsearchVersion
func ElasticsearchVersion_V5_3 ¶
func ElasticsearchVersion_V5_3() ElasticsearchVersion
func ElasticsearchVersion_V5_5 ¶
func ElasticsearchVersion_V5_5() ElasticsearchVersion
func ElasticsearchVersion_V5_6 ¶
func ElasticsearchVersion_V5_6() ElasticsearchVersion
func ElasticsearchVersion_V6_0 ¶
func ElasticsearchVersion_V6_0() ElasticsearchVersion
func ElasticsearchVersion_V6_2 ¶
func ElasticsearchVersion_V6_2() ElasticsearchVersion
func ElasticsearchVersion_V6_3 ¶
func ElasticsearchVersion_V6_3() ElasticsearchVersion
func ElasticsearchVersion_V6_4 ¶
func ElasticsearchVersion_V6_4() ElasticsearchVersion
func ElasticsearchVersion_V6_5 ¶
func ElasticsearchVersion_V6_5() ElasticsearchVersion
func ElasticsearchVersion_V6_7 ¶
func ElasticsearchVersion_V6_7() ElasticsearchVersion
func ElasticsearchVersion_V6_8 ¶
func ElasticsearchVersion_V6_8() ElasticsearchVersion
func ElasticsearchVersion_V7_1 ¶
func ElasticsearchVersion_V7_1() ElasticsearchVersion
func ElasticsearchVersion_V7_10 ¶
func ElasticsearchVersion_V7_10() ElasticsearchVersion
func ElasticsearchVersion_V7_4 ¶
func ElasticsearchVersion_V7_4() ElasticsearchVersion
func ElasticsearchVersion_V7_7 ¶
func ElasticsearchVersion_V7_7() ElasticsearchVersion
func ElasticsearchVersion_V7_8 ¶
func ElasticsearchVersion_V7_8() ElasticsearchVersion
func ElasticsearchVersion_V7_9 ¶
func ElasticsearchVersion_V7_9() ElasticsearchVersion
type EncryptionAtRestOptions ¶
type EncryptionAtRestOptions struct { // Specify true to enable encryption at rest. // Experimental. Enabled *bool `json:"enabled" yaml:"enabled"` // Supply if using KMS key for encryption at rest. // Experimental. KmsKey awskms.IKey `json:"kmsKey" yaml:"kmsKey"` }
Whether the domain should encrypt data at rest, and if so, the AWS Key Management Service (KMS) key to use.
Can only be used to create a new domain, not update an existing one. Requires Elasticsearch version 5.1 or later.
TODO: EXAMPLE
Experimental.
type IDomain ¶
type IDomain interface { awscdk.IResource // Grant read permissions for an index in this domain to an IAM principal (Role/Group/User). // Experimental. GrantIndexRead(index *string, identity awsiam.IGrantable) awsiam.Grant // Grant read/write permissions for an index in this domain to an IAM principal (Role/Group/User). // Experimental. GrantIndexReadWrite(index *string, identity awsiam.IGrantable) awsiam.Grant // Grant write permissions for an index in this domain to an IAM principal (Role/Group/User). // Experimental. GrantIndexWrite(index *string, identity awsiam.IGrantable) awsiam.Grant // Grant read permissions for a specific path in this domain to an IAM principal (Role/Group/User). // Experimental. GrantPathRead(path *string, identity awsiam.IGrantable) awsiam.Grant // Grant read/write permissions for a specific path in this domain to an IAM principal (Role/Group/User). // Experimental. GrantPathReadWrite(path *string, identity awsiam.IGrantable) awsiam.Grant // Grant write permissions for a specific path in this domain to an IAM principal (Role/Group/User). // Experimental. GrantPathWrite(path *string, identity awsiam.IGrantable) awsiam.Grant // Grant read permissions for this domain and its contents to an IAM principal (Role/Group/User). // Experimental. GrantRead(identity awsiam.IGrantable) awsiam.Grant // Grant read/write permissions for this domain and its contents to an IAM principal (Role/Group/User). // Experimental. GrantReadWrite(identity awsiam.IGrantable) awsiam.Grant // Grant write permissions for this domain and its contents to an IAM principal (Role/Group/User). // Experimental. GrantWrite(identity awsiam.IGrantable) awsiam.Grant // Return the given named metric for this Domain. // Experimental. Metric(metricName *string, props *awscloudwatch.MetricOptions) awscloudwatch.Metric // Metric for automated snapshot failures. // Experimental. MetricAutomatedSnapshotFailure(props *awscloudwatch.MetricOptions) awscloudwatch.Metric // Metric for the cluster blocking index writes. // Experimental. MetricClusterIndexWritesBlocked(props *awscloudwatch.MetricOptions) awscloudwatch.Metric // Metric for the time the cluster status is red. // Experimental. MetricClusterStatusRed(props *awscloudwatch.MetricOptions) awscloudwatch.Metric // Metric for the time the cluster status is yellow. // Experimental. MetricClusterStatusYellow(props *awscloudwatch.MetricOptions) awscloudwatch.Metric // Metric for CPU utilization. // Experimental. MetricCPUUtilization(props *awscloudwatch.MetricOptions) awscloudwatch.Metric // Metric for the storage space of nodes in the cluster. // Experimental. MetricFreeStorageSpace(props *awscloudwatch.MetricOptions) awscloudwatch.Metric // Metric for indexing latency. // Experimental. MetricIndexingLatency(props *awscloudwatch.MetricOptions) awscloudwatch.Metric // Metric for JVM memory pressure. // Experimental. MetricJVMMemoryPressure(props *awscloudwatch.MetricOptions) awscloudwatch.Metric // Metric for KMS key errors. // Experimental. MetricKMSKeyError(props *awscloudwatch.MetricOptions) awscloudwatch.Metric // Metric for KMS key being inaccessible. // Experimental. MetricKMSKeyInaccessible(props *awscloudwatch.MetricOptions) awscloudwatch.Metric // Metric for master CPU utilization. // Experimental. MetricMasterCPUUtilization(props *awscloudwatch.MetricOptions) awscloudwatch.Metric // Metric for master JVM memory pressure. // Experimental. MetricMasterJVMMemoryPressure(props *awscloudwatch.MetricOptions) awscloudwatch.Metric // Metric for the number of nodes. // Experimental. MetricNodes(props *awscloudwatch.MetricOptions) awscloudwatch.Metric // Metric for number of searchable documents. // Experimental. MetricSearchableDocuments(props *awscloudwatch.MetricOptions) awscloudwatch.Metric // Metric for search latency. // Experimental. MetricSearchLatency(props *awscloudwatch.MetricOptions) awscloudwatch.Metric // Arn of the Elasticsearch domain. // Experimental. DomainArn() *string // Endpoint of the Elasticsearch domain. // Experimental. DomainEndpoint() *string // Domain name of the Elasticsearch domain. // Experimental. DomainName() *string }
An interface that represents an Elasticsearch domain - either created with the CDK, or an existing one. Experimental.
func Domain_FromDomainAttributes ¶
func Domain_FromDomainAttributes(scope constructs.Construct, id *string, attrs *DomainAttributes) IDomain
Creates a Domain construct that represents an external domain. Experimental.
func Domain_FromDomainEndpoint ¶
func Domain_FromDomainEndpoint(scope constructs.Construct, id *string, domainEndpoint *string) IDomain
Creates a Domain construct that represents an external domain via domain endpoint. Experimental.
type LoggingOptions ¶
type LoggingOptions struct { // Specify if Elasticsearch application logging should be set up. // // Requires Elasticsearch version 5.1 or later. // Experimental. AppLogEnabled *bool `json:"appLogEnabled" yaml:"appLogEnabled"` // Log Elasticsearch application logs to this log group. // Experimental. AppLogGroup awslogs.ILogGroup `json:"appLogGroup" yaml:"appLogGroup"` // Specify if Elasticsearch audit logging should be set up. // // Requires Elasticsearch version 6.7 or later and fine grained access control to be enabled. // Experimental. AuditLogEnabled *bool `json:"auditLogEnabled" yaml:"auditLogEnabled"` // Log Elasticsearch audit logs to this log group. // Experimental. AuditLogGroup awslogs.ILogGroup `json:"auditLogGroup" yaml:"auditLogGroup"` // Specify if slow index logging should be set up. // // Requires Elasticsearch version 5.1 or later. // Experimental. SlowIndexLogEnabled *bool `json:"slowIndexLogEnabled" yaml:"slowIndexLogEnabled"` // Log slow indices to this log group. // Experimental. SlowIndexLogGroup awslogs.ILogGroup `json:"slowIndexLogGroup" yaml:"slowIndexLogGroup"` // Specify if slow search logging should be set up. // // Requires Elasticsearch version 5.1 or later. // Experimental. SlowSearchLogEnabled *bool `json:"slowSearchLogEnabled" yaml:"slowSearchLogEnabled"` // Log slow searches to this log group. // Experimental. SlowSearchLogGroup awslogs.ILogGroup `json:"slowSearchLogGroup" yaml:"slowSearchLogGroup"` }
Configures log settings for the domain.
TODO: EXAMPLE
Experimental.
type TLSSecurityPolicy ¶
type TLSSecurityPolicy string
The minimum TLS version required for traffic to the domain. Experimental.
const ( TLSSecurityPolicy_TLS_1_0 TLSSecurityPolicy = "TLS_1_0" TLSSecurityPolicy_TLS_1_2 TLSSecurityPolicy = "TLS_1_2" )
type ZoneAwarenessConfig ¶
type ZoneAwarenessConfig struct { // If you enabled multiple Availability Zones (AZs), the number of AZs that you want the domain to use. // // Valid values are 2 and 3. // Experimental. AvailabilityZoneCount *float64 `json:"availabilityZoneCount" yaml:"availabilityZoneCount"` // Indicates whether to enable zone awareness for the Amazon ES domain. // // When you enable zone awareness, Amazon ES allocates the nodes and replica // index shards that belong to a cluster across two Availability Zones (AZs) // in the same region to prevent data loss and minimize downtime in the event // of node or data center failure. Don't enable zone awareness if your cluster // has no replica index shards or is a single-node cluster. For more information, // see [Configuring a Multi-AZ Domain] // (https://docs.aws.amazon.com/elasticsearch-service/latest/developerguide/es-createupdatedomains.html#es-managedomains-multiaz) // in the Amazon Elasticsearch Service Developer Guide. // Experimental. Enabled *bool `json:"enabled" yaml:"enabled"` }
Specifies zone awareness configuration options.
TODO: EXAMPLE
Experimental.