We recommend new projects start with resources from the AWS provider.
aws-native.opensearchservice.getDomain
Explore with Pulumi AI
We recommend new projects start with resources from the AWS provider.
An example resource schema demonstrating some basic constructs and validation rules.
Using getDomain
Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.
function getDomain(args: GetDomainArgs, opts?: InvokeOptions): Promise<GetDomainResult>
function getDomainOutput(args: GetDomainOutputArgs, opts?: InvokeOptions): Output<GetDomainResult>
def get_domain(domain_name: Optional[str] = None,
opts: Optional[InvokeOptions] = None) -> GetDomainResult
def get_domain_output(domain_name: Optional[pulumi.Input[str]] = None,
opts: Optional[InvokeOptions] = None) -> Output[GetDomainResult]
func LookupDomain(ctx *Context, args *LookupDomainArgs, opts ...InvokeOption) (*LookupDomainResult, error)
func LookupDomainOutput(ctx *Context, args *LookupDomainOutputArgs, opts ...InvokeOption) LookupDomainResultOutput
> Note: This function is named LookupDomain
in the Go SDK.
public static class GetDomain
{
public static Task<GetDomainResult> InvokeAsync(GetDomainArgs args, InvokeOptions? opts = null)
public static Output<GetDomainResult> Invoke(GetDomainInvokeArgs args, InvokeOptions? opts = null)
}
public static CompletableFuture<GetDomainResult> getDomain(GetDomainArgs args, InvokeOptions options)
// Output-based functions aren't available in Java yet
fn::invoke:
function: aws-native:opensearchservice:getDomain
arguments:
# arguments dictionary
The following arguments are supported:
- Domain
Name string A name for the OpenSearch Service domain. The name must have a minimum length of 3 and a maximum length of 28. If you don't specify a name, AWS CloudFormation generates a unique physical ID and uses that ID for the domain name. For more information, see Name Type .
Required when creating a new domain.
If you specify a name, you can't perform updates that require replacement of this resource. You can perform updates that require no or some interruption. If you must replace the resource, specify a new name.
- Domain
Name string A name for the OpenSearch Service domain. The name must have a minimum length of 3 and a maximum length of 28. If you don't specify a name, AWS CloudFormation generates a unique physical ID and uses that ID for the domain name. For more information, see Name Type .
Required when creating a new domain.
If you specify a name, you can't perform updates that require replacement of this resource. You can perform updates that require no or some interruption. If you must replace the resource, specify a new name.
- domain
Name String A name for the OpenSearch Service domain. The name must have a minimum length of 3 and a maximum length of 28. If you don't specify a name, AWS CloudFormation generates a unique physical ID and uses that ID for the domain name. For more information, see Name Type .
Required when creating a new domain.
If you specify a name, you can't perform updates that require replacement of this resource. You can perform updates that require no or some interruption. If you must replace the resource, specify a new name.
- domain
Name string A name for the OpenSearch Service domain. The name must have a minimum length of 3 and a maximum length of 28. If you don't specify a name, AWS CloudFormation generates a unique physical ID and uses that ID for the domain name. For more information, see Name Type .
Required when creating a new domain.
If you specify a name, you can't perform updates that require replacement of this resource. You can perform updates that require no or some interruption. If you must replace the resource, specify a new name.
- domain_
name str A name for the OpenSearch Service domain. The name must have a minimum length of 3 and a maximum length of 28. If you don't specify a name, AWS CloudFormation generates a unique physical ID and uses that ID for the domain name. For more information, see Name Type .
Required when creating a new domain.
If you specify a name, you can't perform updates that require replacement of this resource. You can perform updates that require no or some interruption. If you must replace the resource, specify a new name.
- domain
Name String A name for the OpenSearch Service domain. The name must have a minimum length of 3 and a maximum length of 28. If you don't specify a name, AWS CloudFormation generates a unique physical ID and uses that ID for the domain name. For more information, see Name Type .
Required when creating a new domain.
If you specify a name, you can't perform updates that require replacement of this resource. You can perform updates that require no or some interruption. If you must replace the resource, specify a new name.
getDomain Result
The following output properties are available:
- Access
Policies object An AWS Identity and Access Management ( IAM ) policy document that specifies who can access the OpenSearch Service domain and their permissions. For more information, see Configuring access policies in the Amazon OpenSearch Service Developer Guide .
Search the CloudFormation User Guide for
AWS::OpenSearchService::Domain
for more information about the expected schema for this property.- Advanced
Options Dictionary<string, string> - Additional options to specify for the OpenSearch Service domain. For more information, see AdvancedOptions in the OpenSearch Service API reference.
- Advanced
Security Pulumi.Options Aws Native. Open Search Service. Outputs. Domain Advanced Security Options Input Specifies options for fine-grained access control and SAML authentication.
If you specify advanced security options, you must also enable node-to-node encryption ( NodeToNodeEncryptionOptions ) and encryption at rest ( EncryptionAtRestOptions ). You must also enable
EnforceHTTPS
within DomainEndpointOptions , which requires HTTPS for all traffic to the domain.- Arn string
- The Amazon Resource Name (ARN) of the CloudFormation stack.
- Cluster
Config Pulumi.Aws Native. Open Search Service. Outputs. Domain Cluster Config - Container for the cluster configuration of a domain.
- Cognito
Options Pulumi.Aws Native. Open Search Service. Outputs. Domain Cognito Options - Configures OpenSearch Service to use Amazon Cognito authentication for OpenSearch Dashboards.
- Domain
Arn string - The Amazon Resource Name (ARN) of the domain. See Identifiers for IAM Entities in Using AWS Identity and Access Management for more information.
- Domain
Endpoint string - The domain-specific endpoint used for requests to the OpenSearch APIs, such as
search-mystack-1ab2cdefghij-ab1c2deckoyb3hofw7wpqa3cm.us-west-1.es.amazonaws.com
. - Domain
Endpoint Pulumi.Options Aws Native. Open Search Service. Outputs. Domain Endpoint Options - Specifies additional options for the domain endpoint, such as whether to require HTTPS for all traffic or whether to use a custom endpoint rather than the default endpoint.
- Domain
Endpoint stringV2 - If
IPAddressType
to set todualstack
, a version 2 domain endpoint is provisioned. This endpoint functions like a normal endpoint, except that it works with both IPv4 and IPv6 IP addresses. Normal endpoints work only with IPv4 IP addresses. - Domain
Endpoints Dictionary<string, string> - Ebs
Options Pulumi.Aws Native. Open Search Service. Outputs. Domain Ebs Options - The configurations of Amazon Elastic Block Store (Amazon EBS) volumes that are attached to data nodes in the OpenSearch Service domain. For more information, see EBS volume size limits in the Amazon OpenSearch Service Developer Guide .
- Encryption
At Pulumi.Rest Options Aws Native. Open Search Service. Outputs. Domain Encryption At Rest Options Whether the domain should encrypt data at rest, and if so, the AWS KMS key to use. See Encryption of data at rest for Amazon OpenSearch Service .
If no encryption at rest options were initially specified in the template, updating this property by adding it causes no interruption. However, if you change this property after it's already been set within a template, the domain is deleted and recreated in order to modify the property.
- Engine
Version string The version of OpenSearch to use. The value must be in the format
OpenSearch_X.Y
orElasticsearch_X.Y
. If not specified, the latest version of OpenSearch is used. For information about the versions that OpenSearch Service supports, see Supported versions of OpenSearch and Elasticsearch in the Amazon OpenSearch Service Developer Guide .If you set the EnableVersionUpgrade update policy to
true
, you can updateEngineVersion
without interruption. WhenEnableVersionUpgrade
is set tofalse
, or is not specified, updatingEngineVersion
results in replacement .- Id string
- The resource ID. For example,
123456789012/my-domain
. - Identity
Center Pulumi.Options Aws Native. Open Search Service. Outputs. Domain Identity Center Options - Container for IAM Identity Center Option control for the domain.
- Ip
Address stringType - Choose either dual stack or IPv4 as your IP address type. Dual stack allows you to share domain resources across IPv4 and IPv6 address types, and is the recommended option. If you set your IP address type to dual stack, you can't change your address type later.
- Log
Publishing Dictionary<string, Pulumi.Options Aws Native. Open Search Service. Outputs. Domain Log Publishing Option> - An object with one or more of the following keys:
SEARCH_SLOW_LOGS
,ES_APPLICATION_LOGS
,INDEX_SLOW_LOGS
,AUDIT_LOGS
, depending on the types of logs you want to publish. Each key needs a validLogPublishingOption
value. For the full syntax, see the examples . - Node
To Pulumi.Node Encryption Options Aws Native. Open Search Service. Outputs. Domain Node To Node Encryption Options - Specifies whether node-to-node encryption is enabled. See Node-to-node encryption for Amazon OpenSearch Service .
- Off
Peak Pulumi.Window Options Aws Native. Open Search Service. Outputs. Domain Off Peak Window Options - Options for a domain's off-peak window, during which OpenSearch Service can perform mandatory configuration changes on the domain.
- Service
Software Pulumi.Options Aws Native. Open Search Service. Outputs. Domain Service Software Options - Skip
Shard boolMigration Wait - Snapshot
Options Pulumi.Aws Native. Open Search Service. Outputs. Domain Snapshot Options - DEPRECATED . The automated snapshot configuration for the OpenSearch Service domain indexes.
- Software
Update Pulumi.Options Aws Native. Open Search Service. Outputs. Domain Software Update Options - Service software update options for the domain.
- List<Pulumi.
Aws Native. Outputs. Tag> - An arbitrary set of tags (key-value pairs) for this Domain.
- Vpc
Options Pulumi.Aws Native. Open Search Service. Outputs. Domain Vpc Options The virtual private cloud (VPC) configuration for the OpenSearch Service domain. For more information, see Launching your Amazon OpenSearch Service domains within a VPC in the Amazon OpenSearch Service Developer Guide .
If you remove this entity altogether, along with its associated properties, it causes a replacement. You might encounter this scenario if you're updating your security configuration from a VPC to a public endpoint.
- Access
Policies interface{} An AWS Identity and Access Management ( IAM ) policy document that specifies who can access the OpenSearch Service domain and their permissions. For more information, see Configuring access policies in the Amazon OpenSearch Service Developer Guide .
Search the CloudFormation User Guide for
AWS::OpenSearchService::Domain
for more information about the expected schema for this property.- Advanced
Options map[string]string - Additional options to specify for the OpenSearch Service domain. For more information, see AdvancedOptions in the OpenSearch Service API reference.
- Advanced
Security DomainOptions Advanced Security Options Input Specifies options for fine-grained access control and SAML authentication.
If you specify advanced security options, you must also enable node-to-node encryption ( NodeToNodeEncryptionOptions ) and encryption at rest ( EncryptionAtRestOptions ). You must also enable
EnforceHTTPS
within DomainEndpointOptions , which requires HTTPS for all traffic to the domain.- Arn string
- The Amazon Resource Name (ARN) of the CloudFormation stack.
- Cluster
Config DomainCluster Config - Container for the cluster configuration of a domain.
- Cognito
Options DomainCognito Options - Configures OpenSearch Service to use Amazon Cognito authentication for OpenSearch Dashboards.
- Domain
Arn string - The Amazon Resource Name (ARN) of the domain. See Identifiers for IAM Entities in Using AWS Identity and Access Management for more information.
- Domain
Endpoint string - The domain-specific endpoint used for requests to the OpenSearch APIs, such as
search-mystack-1ab2cdefghij-ab1c2deckoyb3hofw7wpqa3cm.us-west-1.es.amazonaws.com
. - Domain
Endpoint DomainOptions Endpoint Options - Specifies additional options for the domain endpoint, such as whether to require HTTPS for all traffic or whether to use a custom endpoint rather than the default endpoint.
- Domain
Endpoint stringV2 - If
IPAddressType
to set todualstack
, a version 2 domain endpoint is provisioned. This endpoint functions like a normal endpoint, except that it works with both IPv4 and IPv6 IP addresses. Normal endpoints work only with IPv4 IP addresses. - Domain
Endpoints map[string]string - Ebs
Options DomainEbs Options - The configurations of Amazon Elastic Block Store (Amazon EBS) volumes that are attached to data nodes in the OpenSearch Service domain. For more information, see EBS volume size limits in the Amazon OpenSearch Service Developer Guide .
- Encryption
At DomainRest Options Encryption At Rest Options Whether the domain should encrypt data at rest, and if so, the AWS KMS key to use. See Encryption of data at rest for Amazon OpenSearch Service .
If no encryption at rest options were initially specified in the template, updating this property by adding it causes no interruption. However, if you change this property after it's already been set within a template, the domain is deleted and recreated in order to modify the property.
- Engine
Version string The version of OpenSearch to use. The value must be in the format
OpenSearch_X.Y
orElasticsearch_X.Y
. If not specified, the latest version of OpenSearch is used. For information about the versions that OpenSearch Service supports, see Supported versions of OpenSearch and Elasticsearch in the Amazon OpenSearch Service Developer Guide .If you set the EnableVersionUpgrade update policy to
true
, you can updateEngineVersion
without interruption. WhenEnableVersionUpgrade
is set tofalse
, or is not specified, updatingEngineVersion
results in replacement .- Id string
- The resource ID. For example,
123456789012/my-domain
. - Identity
Center DomainOptions Identity Center Options - Container for IAM Identity Center Option control for the domain.
- Ip
Address stringType - Choose either dual stack or IPv4 as your IP address type. Dual stack allows you to share domain resources across IPv4 and IPv6 address types, and is the recommended option. If you set your IP address type to dual stack, you can't change your address type later.
- Log
Publishing map[string]DomainOptions Log Publishing Option - An object with one or more of the following keys:
SEARCH_SLOW_LOGS
,ES_APPLICATION_LOGS
,INDEX_SLOW_LOGS
,AUDIT_LOGS
, depending on the types of logs you want to publish. Each key needs a validLogPublishingOption
value. For the full syntax, see the examples . - Node
To DomainNode Encryption Options Node To Node Encryption Options - Specifies whether node-to-node encryption is enabled. See Node-to-node encryption for Amazon OpenSearch Service .
- Off
Peak DomainWindow Options Off Peak Window Options - Options for a domain's off-peak window, during which OpenSearch Service can perform mandatory configuration changes on the domain.
- Service
Software DomainOptions Service Software Options - Skip
Shard boolMigration Wait - Snapshot
Options DomainSnapshot Options - DEPRECATED . The automated snapshot configuration for the OpenSearch Service domain indexes.
- Software
Update DomainOptions Software Update Options - Service software update options for the domain.
- Tag
- An arbitrary set of tags (key-value pairs) for this Domain.
- Vpc
Options DomainVpc Options The virtual private cloud (VPC) configuration for the OpenSearch Service domain. For more information, see Launching your Amazon OpenSearch Service domains within a VPC in the Amazon OpenSearch Service Developer Guide .
If you remove this entity altogether, along with its associated properties, it causes a replacement. You might encounter this scenario if you're updating your security configuration from a VPC to a public endpoint.
- access
Policies Object An AWS Identity and Access Management ( IAM ) policy document that specifies who can access the OpenSearch Service domain and their permissions. For more information, see Configuring access policies in the Amazon OpenSearch Service Developer Guide .
Search the CloudFormation User Guide for
AWS::OpenSearchService::Domain
for more information about the expected schema for this property.- advanced
Options Map<String,String> - Additional options to specify for the OpenSearch Service domain. For more information, see AdvancedOptions in the OpenSearch Service API reference.
- advanced
Security DomainOptions Advanced Security Options Input Specifies options for fine-grained access control and SAML authentication.
If you specify advanced security options, you must also enable node-to-node encryption ( NodeToNodeEncryptionOptions ) and encryption at rest ( EncryptionAtRestOptions ). You must also enable
EnforceHTTPS
within DomainEndpointOptions , which requires HTTPS for all traffic to the domain.- arn String
- The Amazon Resource Name (ARN) of the CloudFormation stack.
- cluster
Config DomainCluster Config - Container for the cluster configuration of a domain.
- cognito
Options DomainCognito Options - Configures OpenSearch Service to use Amazon Cognito authentication for OpenSearch Dashboards.
- domain
Arn String - The Amazon Resource Name (ARN) of the domain. See Identifiers for IAM Entities in Using AWS Identity and Access Management for more information.
- domain
Endpoint String - The domain-specific endpoint used for requests to the OpenSearch APIs, such as
search-mystack-1ab2cdefghij-ab1c2deckoyb3hofw7wpqa3cm.us-west-1.es.amazonaws.com
. - domain
Endpoint DomainOptions Endpoint Options - Specifies additional options for the domain endpoint, such as whether to require HTTPS for all traffic or whether to use a custom endpoint rather than the default endpoint.
- domain
Endpoint StringV2 - If
IPAddressType
to set todualstack
, a version 2 domain endpoint is provisioned. This endpoint functions like a normal endpoint, except that it works with both IPv4 and IPv6 IP addresses. Normal endpoints work only with IPv4 IP addresses. - domain
Endpoints Map<String,String> - ebs
Options DomainEbs Options - The configurations of Amazon Elastic Block Store (Amazon EBS) volumes that are attached to data nodes in the OpenSearch Service domain. For more information, see EBS volume size limits in the Amazon OpenSearch Service Developer Guide .
- encryption
At DomainRest Options Encryption At Rest Options Whether the domain should encrypt data at rest, and if so, the AWS KMS key to use. See Encryption of data at rest for Amazon OpenSearch Service .
If no encryption at rest options were initially specified in the template, updating this property by adding it causes no interruption. However, if you change this property after it's already been set within a template, the domain is deleted and recreated in order to modify the property.
- engine
Version String The version of OpenSearch to use. The value must be in the format
OpenSearch_X.Y
orElasticsearch_X.Y
. If not specified, the latest version of OpenSearch is used. For information about the versions that OpenSearch Service supports, see Supported versions of OpenSearch and Elasticsearch in the Amazon OpenSearch Service Developer Guide .If you set the EnableVersionUpgrade update policy to
true
, you can updateEngineVersion
without interruption. WhenEnableVersionUpgrade
is set tofalse
, or is not specified, updatingEngineVersion
results in replacement .- id String
- The resource ID. For example,
123456789012/my-domain
. - identity
Center DomainOptions Identity Center Options - Container for IAM Identity Center Option control for the domain.
- ip
Address StringType - Choose either dual stack or IPv4 as your IP address type. Dual stack allows you to share domain resources across IPv4 and IPv6 address types, and is the recommended option. If you set your IP address type to dual stack, you can't change your address type later.
- log
Publishing Map<String,DomainOptions Log Publishing Option> - An object with one or more of the following keys:
SEARCH_SLOW_LOGS
,ES_APPLICATION_LOGS
,INDEX_SLOW_LOGS
,AUDIT_LOGS
, depending on the types of logs you want to publish. Each key needs a validLogPublishingOption
value. For the full syntax, see the examples . - node
To DomainNode Encryption Options Node To Node Encryption Options - Specifies whether node-to-node encryption is enabled. See Node-to-node encryption for Amazon OpenSearch Service .
- off
Peak DomainWindow Options Off Peak Window Options - Options for a domain's off-peak window, during which OpenSearch Service can perform mandatory configuration changes on the domain.
- service
Software DomainOptions Service Software Options - skip
Shard BooleanMigration Wait - snapshot
Options DomainSnapshot Options - DEPRECATED . The automated snapshot configuration for the OpenSearch Service domain indexes.
- software
Update DomainOptions Software Update Options - Service software update options for the domain.
- List<Tag>
- An arbitrary set of tags (key-value pairs) for this Domain.
- vpc
Options DomainVpc Options The virtual private cloud (VPC) configuration for the OpenSearch Service domain. For more information, see Launching your Amazon OpenSearch Service domains within a VPC in the Amazon OpenSearch Service Developer Guide .
If you remove this entity altogether, along with its associated properties, it causes a replacement. You might encounter this scenario if you're updating your security configuration from a VPC to a public endpoint.
- access
Policies any An AWS Identity and Access Management ( IAM ) policy document that specifies who can access the OpenSearch Service domain and their permissions. For more information, see Configuring access policies in the Amazon OpenSearch Service Developer Guide .
Search the CloudFormation User Guide for
AWS::OpenSearchService::Domain
for more information about the expected schema for this property.- advanced
Options {[key: string]: string} - Additional options to specify for the OpenSearch Service domain. For more information, see AdvancedOptions in the OpenSearch Service API reference.
- advanced
Security DomainOptions Advanced Security Options Input Specifies options for fine-grained access control and SAML authentication.
If you specify advanced security options, you must also enable node-to-node encryption ( NodeToNodeEncryptionOptions ) and encryption at rest ( EncryptionAtRestOptions ). You must also enable
EnforceHTTPS
within DomainEndpointOptions , which requires HTTPS for all traffic to the domain.- arn string
- The Amazon Resource Name (ARN) of the CloudFormation stack.
- cluster
Config DomainCluster Config - Container for the cluster configuration of a domain.
- cognito
Options DomainCognito Options - Configures OpenSearch Service to use Amazon Cognito authentication for OpenSearch Dashboards.
- domain
Arn string - The Amazon Resource Name (ARN) of the domain. See Identifiers for IAM Entities in Using AWS Identity and Access Management for more information.
- domain
Endpoint string - The domain-specific endpoint used for requests to the OpenSearch APIs, such as
search-mystack-1ab2cdefghij-ab1c2deckoyb3hofw7wpqa3cm.us-west-1.es.amazonaws.com
. - domain
Endpoint DomainOptions Endpoint Options - Specifies additional options for the domain endpoint, such as whether to require HTTPS for all traffic or whether to use a custom endpoint rather than the default endpoint.
- domain
Endpoint stringV2 - If
IPAddressType
to set todualstack
, a version 2 domain endpoint is provisioned. This endpoint functions like a normal endpoint, except that it works with both IPv4 and IPv6 IP addresses. Normal endpoints work only with IPv4 IP addresses. - domain
Endpoints {[key: string]: string} - ebs
Options DomainEbs Options - The configurations of Amazon Elastic Block Store (Amazon EBS) volumes that are attached to data nodes in the OpenSearch Service domain. For more information, see EBS volume size limits in the Amazon OpenSearch Service Developer Guide .
- encryption
At DomainRest Options Encryption At Rest Options Whether the domain should encrypt data at rest, and if so, the AWS KMS key to use. See Encryption of data at rest for Amazon OpenSearch Service .
If no encryption at rest options were initially specified in the template, updating this property by adding it causes no interruption. However, if you change this property after it's already been set within a template, the domain is deleted and recreated in order to modify the property.
- engine
Version string The version of OpenSearch to use. The value must be in the format
OpenSearch_X.Y
orElasticsearch_X.Y
. If not specified, the latest version of OpenSearch is used. For information about the versions that OpenSearch Service supports, see Supported versions of OpenSearch and Elasticsearch in the Amazon OpenSearch Service Developer Guide .If you set the EnableVersionUpgrade update policy to
true
, you can updateEngineVersion
without interruption. WhenEnableVersionUpgrade
is set tofalse
, or is not specified, updatingEngineVersion
results in replacement .- id string
- The resource ID. For example,
123456789012/my-domain
. - identity
Center DomainOptions Identity Center Options - Container for IAM Identity Center Option control for the domain.
- ip
Address stringType - Choose either dual stack or IPv4 as your IP address type. Dual stack allows you to share domain resources across IPv4 and IPv6 address types, and is the recommended option. If you set your IP address type to dual stack, you can't change your address type later.
- log
Publishing {[key: string]: DomainOptions Log Publishing Option} - An object with one or more of the following keys:
SEARCH_SLOW_LOGS
,ES_APPLICATION_LOGS
,INDEX_SLOW_LOGS
,AUDIT_LOGS
, depending on the types of logs you want to publish. Each key needs a validLogPublishingOption
value. For the full syntax, see the examples . - node
To DomainNode Encryption Options Node To Node Encryption Options - Specifies whether node-to-node encryption is enabled. See Node-to-node encryption for Amazon OpenSearch Service .
- off
Peak DomainWindow Options Off Peak Window Options - Options for a domain's off-peak window, during which OpenSearch Service can perform mandatory configuration changes on the domain.
- service
Software DomainOptions Service Software Options - skip
Shard booleanMigration Wait - snapshot
Options DomainSnapshot Options - DEPRECATED . The automated snapshot configuration for the OpenSearch Service domain indexes.
- software
Update DomainOptions Software Update Options - Service software update options for the domain.
- Tag[]
- An arbitrary set of tags (key-value pairs) for this Domain.
- vpc
Options DomainVpc Options The virtual private cloud (VPC) configuration for the OpenSearch Service domain. For more information, see Launching your Amazon OpenSearch Service domains within a VPC in the Amazon OpenSearch Service Developer Guide .
If you remove this entity altogether, along with its associated properties, it causes a replacement. You might encounter this scenario if you're updating your security configuration from a VPC to a public endpoint.
- access_
policies Any An AWS Identity and Access Management ( IAM ) policy document that specifies who can access the OpenSearch Service domain and their permissions. For more information, see Configuring access policies in the Amazon OpenSearch Service Developer Guide .
Search the CloudFormation User Guide for
AWS::OpenSearchService::Domain
for more information about the expected schema for this property.- advanced_
options Mapping[str, str] - Additional options to specify for the OpenSearch Service domain. For more information, see AdvancedOptions in the OpenSearch Service API reference.
- advanced_
security_ Domainoptions Advanced Security Options Input Specifies options for fine-grained access control and SAML authentication.
If you specify advanced security options, you must also enable node-to-node encryption ( NodeToNodeEncryptionOptions ) and encryption at rest ( EncryptionAtRestOptions ). You must also enable
EnforceHTTPS
within DomainEndpointOptions , which requires HTTPS for all traffic to the domain.- arn str
- The Amazon Resource Name (ARN) of the CloudFormation stack.
- cluster_
config DomainCluster Config - Container for the cluster configuration of a domain.
- cognito_
options DomainCognito Options - Configures OpenSearch Service to use Amazon Cognito authentication for OpenSearch Dashboards.
- domain_
arn str - The Amazon Resource Name (ARN) of the domain. See Identifiers for IAM Entities in Using AWS Identity and Access Management for more information.
- domain_
endpoint str - The domain-specific endpoint used for requests to the OpenSearch APIs, such as
search-mystack-1ab2cdefghij-ab1c2deckoyb3hofw7wpqa3cm.us-west-1.es.amazonaws.com
. - domain_
endpoint_ Domainoptions Endpoint Options - Specifies additional options for the domain endpoint, such as whether to require HTTPS for all traffic or whether to use a custom endpoint rather than the default endpoint.
- domain_
endpoint_ strv2 - If
IPAddressType
to set todualstack
, a version 2 domain endpoint is provisioned. This endpoint functions like a normal endpoint, except that it works with both IPv4 and IPv6 IP addresses. Normal endpoints work only with IPv4 IP addresses. - domain_
endpoints Mapping[str, str] - ebs_
options DomainEbs Options - The configurations of Amazon Elastic Block Store (Amazon EBS) volumes that are attached to data nodes in the OpenSearch Service domain. For more information, see EBS volume size limits in the Amazon OpenSearch Service Developer Guide .
- encryption_
at_ Domainrest_ options Encryption At Rest Options Whether the domain should encrypt data at rest, and if so, the AWS KMS key to use. See Encryption of data at rest for Amazon OpenSearch Service .
If no encryption at rest options were initially specified in the template, updating this property by adding it causes no interruption. However, if you change this property after it's already been set within a template, the domain is deleted and recreated in order to modify the property.
- engine_
version str The version of OpenSearch to use. The value must be in the format
OpenSearch_X.Y
orElasticsearch_X.Y
. If not specified, the latest version of OpenSearch is used. For information about the versions that OpenSearch Service supports, see Supported versions of OpenSearch and Elasticsearch in the Amazon OpenSearch Service Developer Guide .If you set the EnableVersionUpgrade update policy to
true
, you can updateEngineVersion
without interruption. WhenEnableVersionUpgrade
is set tofalse
, or is not specified, updatingEngineVersion
results in replacement .- id str
- The resource ID. For example,
123456789012/my-domain
. - identity_
center_ Domainoptions Identity Center Options - Container for IAM Identity Center Option control for the domain.
- ip_
address_ strtype - Choose either dual stack or IPv4 as your IP address type. Dual stack allows you to share domain resources across IPv4 and IPv6 address types, and is the recommended option. If you set your IP address type to dual stack, you can't change your address type later.
- log_
publishing_ Mapping[str, Domainoptions Log Publishing Option] - An object with one or more of the following keys:
SEARCH_SLOW_LOGS
,ES_APPLICATION_LOGS
,INDEX_SLOW_LOGS
,AUDIT_LOGS
, depending on the types of logs you want to publish. Each key needs a validLogPublishingOption
value. For the full syntax, see the examples . - node_
to_ Domainnode_ encryption_ options Node To Node Encryption Options - Specifies whether node-to-node encryption is enabled. See Node-to-node encryption for Amazon OpenSearch Service .
- off_
peak_ Domainwindow_ options Off Peak Window Options - Options for a domain's off-peak window, during which OpenSearch Service can perform mandatory configuration changes on the domain.
- service_
software_ Domainoptions Service Software Options - skip_
shard_ boolmigration_ wait - snapshot_
options DomainSnapshot Options - DEPRECATED . The automated snapshot configuration for the OpenSearch Service domain indexes.
- software_
update_ Domainoptions Software Update Options - Service software update options for the domain.
- Sequence[root_Tag]
- An arbitrary set of tags (key-value pairs) for this Domain.
- vpc_
options DomainVpc Options The virtual private cloud (VPC) configuration for the OpenSearch Service domain. For more information, see Launching your Amazon OpenSearch Service domains within a VPC in the Amazon OpenSearch Service Developer Guide .
If you remove this entity altogether, along with its associated properties, it causes a replacement. You might encounter this scenario if you're updating your security configuration from a VPC to a public endpoint.
- access
Policies Any An AWS Identity and Access Management ( IAM ) policy document that specifies who can access the OpenSearch Service domain and their permissions. For more information, see Configuring access policies in the Amazon OpenSearch Service Developer Guide .
Search the CloudFormation User Guide for
AWS::OpenSearchService::Domain
for more information about the expected schema for this property.- advanced
Options Map<String> - Additional options to specify for the OpenSearch Service domain. For more information, see AdvancedOptions in the OpenSearch Service API reference.
- advanced
Security Property MapOptions Specifies options for fine-grained access control and SAML authentication.
If you specify advanced security options, you must also enable node-to-node encryption ( NodeToNodeEncryptionOptions ) and encryption at rest ( EncryptionAtRestOptions ). You must also enable
EnforceHTTPS
within DomainEndpointOptions , which requires HTTPS for all traffic to the domain.- arn String
- The Amazon Resource Name (ARN) of the CloudFormation stack.
- cluster
Config Property Map - Container for the cluster configuration of a domain.
- cognito
Options Property Map - Configures OpenSearch Service to use Amazon Cognito authentication for OpenSearch Dashboards.
- domain
Arn String - The Amazon Resource Name (ARN) of the domain. See Identifiers for IAM Entities in Using AWS Identity and Access Management for more information.
- domain
Endpoint String - The domain-specific endpoint used for requests to the OpenSearch APIs, such as
search-mystack-1ab2cdefghij-ab1c2deckoyb3hofw7wpqa3cm.us-west-1.es.amazonaws.com
. - domain
Endpoint Property MapOptions - Specifies additional options for the domain endpoint, such as whether to require HTTPS for all traffic or whether to use a custom endpoint rather than the default endpoint.
- domain
Endpoint StringV2 - If
IPAddressType
to set todualstack
, a version 2 domain endpoint is provisioned. This endpoint functions like a normal endpoint, except that it works with both IPv4 and IPv6 IP addresses. Normal endpoints work only with IPv4 IP addresses. - domain
Endpoints Map<String> - ebs
Options Property Map - The configurations of Amazon Elastic Block Store (Amazon EBS) volumes that are attached to data nodes in the OpenSearch Service domain. For more information, see EBS volume size limits in the Amazon OpenSearch Service Developer Guide .
- encryption
At Property MapRest Options Whether the domain should encrypt data at rest, and if so, the AWS KMS key to use. See Encryption of data at rest for Amazon OpenSearch Service .
If no encryption at rest options were initially specified in the template, updating this property by adding it causes no interruption. However, if you change this property after it's already been set within a template, the domain is deleted and recreated in order to modify the property.
- engine
Version String The version of OpenSearch to use. The value must be in the format
OpenSearch_X.Y
orElasticsearch_X.Y
. If not specified, the latest version of OpenSearch is used. For information about the versions that OpenSearch Service supports, see Supported versions of OpenSearch and Elasticsearch in the Amazon OpenSearch Service Developer Guide .If you set the EnableVersionUpgrade update policy to
true
, you can updateEngineVersion
without interruption. WhenEnableVersionUpgrade
is set tofalse
, or is not specified, updatingEngineVersion
results in replacement .- id String
- The resource ID. For example,
123456789012/my-domain
. - identity
Center Property MapOptions - Container for IAM Identity Center Option control for the domain.
- ip
Address StringType - Choose either dual stack or IPv4 as your IP address type. Dual stack allows you to share domain resources across IPv4 and IPv6 address types, and is the recommended option. If you set your IP address type to dual stack, you can't change your address type later.
- log
Publishing Map<Property Map>Options - An object with one or more of the following keys:
SEARCH_SLOW_LOGS
,ES_APPLICATION_LOGS
,INDEX_SLOW_LOGS
,AUDIT_LOGS
, depending on the types of logs you want to publish. Each key needs a validLogPublishingOption
value. For the full syntax, see the examples . - node
To Property MapNode Encryption Options - Specifies whether node-to-node encryption is enabled. See Node-to-node encryption for Amazon OpenSearch Service .
- off
Peak Property MapWindow Options - Options for a domain's off-peak window, during which OpenSearch Service can perform mandatory configuration changes on the domain.
- service
Software Property MapOptions - skip
Shard BooleanMigration Wait - snapshot
Options Property Map - DEPRECATED . The automated snapshot configuration for the OpenSearch Service domain indexes.
- software
Update Property MapOptions - Service software update options for the domain.
- List<Property Map>
- An arbitrary set of tags (key-value pairs) for this Domain.
- vpc
Options Property Map The virtual private cloud (VPC) configuration for the OpenSearch Service domain. For more information, see Launching your Amazon OpenSearch Service domains within a VPC in the Amazon OpenSearch Service Developer Guide .
If you remove this entity altogether, along with its associated properties, it causes a replacement. You might encounter this scenario if you're updating your security configuration from a VPC to a public endpoint.
Supporting Types
DomainAdvancedSecurityOptionsInput
- Anonymous
Auth stringDisable Date - Date and time when the migration period will be disabled. Only necessary when enabling fine-grained access control on an existing domain .
- Anonymous
Auth boolEnabled - True to enable a 30-day migration period during which administrators can create role mappings. Only necessary when enabling fine-grained access control on an existing domain .
- Enabled bool
- True to enable fine-grained access control. You must also enable encryption of data at rest and node-to-node encryption. See Fine-grained access control in Amazon OpenSearch Service .
- Internal
User boolDatabase Enabled - True to enable the internal user database.
- Jwt
Options Pulumi.Aws Native. Open Search Service. Inputs. Domain Jwt Options - Container for information about the JWT configuration of the Amazon OpenSearch Service.
- Master
User Pulumi.Options Aws Native. Open Search Service. Inputs. Domain Master User Options - Specifies information about the master user.
- Saml
Options Pulumi.Aws Native. Open Search Service. Inputs. Domain Saml Options - Container for information about the SAML configuration for OpenSearch Dashboards.
- Anonymous
Auth stringDisable Date - Date and time when the migration period will be disabled. Only necessary when enabling fine-grained access control on an existing domain .
- Anonymous
Auth boolEnabled - True to enable a 30-day migration period during which administrators can create role mappings. Only necessary when enabling fine-grained access control on an existing domain .
- Enabled bool
- True to enable fine-grained access control. You must also enable encryption of data at rest and node-to-node encryption. See Fine-grained access control in Amazon OpenSearch Service .
- Internal
User boolDatabase Enabled - True to enable the internal user database.
- Jwt
Options DomainJwt Options - Container for information about the JWT configuration of the Amazon OpenSearch Service.
- Master
User DomainOptions Master User Options - Specifies information about the master user.
- Saml
Options DomainSaml Options - Container for information about the SAML configuration for OpenSearch Dashboards.
- anonymous
Auth StringDisable Date - Date and time when the migration period will be disabled. Only necessary when enabling fine-grained access control on an existing domain .
- anonymous
Auth BooleanEnabled - True to enable a 30-day migration period during which administrators can create role mappings. Only necessary when enabling fine-grained access control on an existing domain .
- enabled Boolean
- True to enable fine-grained access control. You must also enable encryption of data at rest and node-to-node encryption. See Fine-grained access control in Amazon OpenSearch Service .
- internal
User BooleanDatabase Enabled - True to enable the internal user database.
- jwt
Options DomainJwt Options - Container for information about the JWT configuration of the Amazon OpenSearch Service.
- master
User DomainOptions Master User Options - Specifies information about the master user.
- saml
Options DomainSaml Options - Container for information about the SAML configuration for OpenSearch Dashboards.
- anonymous
Auth stringDisable Date - Date and time when the migration period will be disabled. Only necessary when enabling fine-grained access control on an existing domain .
- anonymous
Auth booleanEnabled - True to enable a 30-day migration period during which administrators can create role mappings. Only necessary when enabling fine-grained access control on an existing domain .
- enabled boolean
- True to enable fine-grained access control. You must also enable encryption of data at rest and node-to-node encryption. See Fine-grained access control in Amazon OpenSearch Service .
- internal
User booleanDatabase Enabled - True to enable the internal user database.
- jwt
Options DomainJwt Options - Container for information about the JWT configuration of the Amazon OpenSearch Service.
- master
User DomainOptions Master User Options - Specifies information about the master user.
- saml
Options DomainSaml Options - Container for information about the SAML configuration for OpenSearch Dashboards.
- anonymous_
auth_ strdisable_ date - Date and time when the migration period will be disabled. Only necessary when enabling fine-grained access control on an existing domain .
- anonymous_
auth_ boolenabled - True to enable a 30-day migration period during which administrators can create role mappings. Only necessary when enabling fine-grained access control on an existing domain .
- enabled bool
- True to enable fine-grained access control. You must also enable encryption of data at rest and node-to-node encryption. See Fine-grained access control in Amazon OpenSearch Service .
- internal_
user_ booldatabase_ enabled - True to enable the internal user database.
- jwt_
options DomainJwt Options - Container for information about the JWT configuration of the Amazon OpenSearch Service.
- master_
user_ Domainoptions Master User Options - Specifies information about the master user.
- saml_
options DomainSaml Options - Container for information about the SAML configuration for OpenSearch Dashboards.
- anonymous
Auth StringDisable Date - Date and time when the migration period will be disabled. Only necessary when enabling fine-grained access control on an existing domain .
- anonymous
Auth BooleanEnabled - True to enable a 30-day migration period during which administrators can create role mappings. Only necessary when enabling fine-grained access control on an existing domain .
- enabled Boolean
- True to enable fine-grained access control. You must also enable encryption of data at rest and node-to-node encryption. See Fine-grained access control in Amazon OpenSearch Service .
- internal
User BooleanDatabase Enabled - True to enable the internal user database.
- jwt
Options Property Map - Container for information about the JWT configuration of the Amazon OpenSearch Service.
- master
User Property MapOptions - Specifies information about the master user.
- saml
Options Property Map - Container for information about the SAML configuration for OpenSearch Dashboards.
DomainClusterConfig
- Cold
Storage Pulumi.Options Aws Native. Open Search Service. Inputs. Domain Cold Storage Options - Container for cold storage configuration options.
- Dedicated
Master intCount - The number of instances to use for the master node. If you specify this property, you must specify
true
for theDedicatedMasterEnabled
property. - Dedicated
Master boolEnabled - Indicates whether to use a dedicated master node for the OpenSearch Service domain. A dedicated master node is a cluster node that performs cluster management tasks, but doesn't hold data or respond to data upload requests. Dedicated master nodes offload cluster management tasks to increase the stability of your search clusters. See Dedicated master nodes in Amazon OpenSearch Service .
- Dedicated
Master stringType - The hardware configuration of the computer that hosts the dedicated master node, such as
m3.medium.search
. If you specify this property, you must specifytrue
for theDedicatedMasterEnabled
property. For valid values, see Supported instance types in Amazon OpenSearch Service . - Instance
Count int - The number of data nodes (instances) to use in the OpenSearch Service domain.
- Instance
Type string - The instance type for your data nodes, such as
m3.medium.search
. For valid values, see Supported instance types in Amazon OpenSearch Service . - Multi
Az boolWith Standby Enabled - Indicates whether Multi-AZ with Standby deployment option is enabled. For more information, see Multi-AZ with Standby .
- Warm
Count int - The number of warm nodes in the cluster.
- Warm
Enabled bool - Whether to enable UltraWarm storage for the cluster. See UltraWarm storage for Amazon OpenSearch Service .
- Warm
Type string - The instance type for the cluster's warm nodes.
- Zone
Awareness Pulumi.Config Aws Native. Open Search Service. Inputs. Domain Zone Awareness Config - Specifies zone awareness configuration options. Only use if
ZoneAwarenessEnabled
istrue
. - Zone
Awareness boolEnabled - Indicates whether to enable zone awareness for the OpenSearch Service domain. When you enable zone awareness, OpenSearch Service allocates the nodes and replica index shards that belong to a cluster across two Availability Zones (AZs) in the same region to prevent data loss and minimize downtime in the event of node or data center failure. Don't enable zone awareness if your cluster has no replica index shards or is a single-node cluster. For more information, see Configuring a multi-AZ domain in Amazon OpenSearch Service .
- Cold
Storage DomainOptions Cold Storage Options - Container for cold storage configuration options.
- Dedicated
Master intCount - The number of instances to use for the master node. If you specify this property, you must specify
true
for theDedicatedMasterEnabled
property. - Dedicated
Master boolEnabled - Indicates whether to use a dedicated master node for the OpenSearch Service domain. A dedicated master node is a cluster node that performs cluster management tasks, but doesn't hold data or respond to data upload requests. Dedicated master nodes offload cluster management tasks to increase the stability of your search clusters. See Dedicated master nodes in Amazon OpenSearch Service .
- Dedicated
Master stringType - The hardware configuration of the computer that hosts the dedicated master node, such as
m3.medium.search
. If you specify this property, you must specifytrue
for theDedicatedMasterEnabled
property. For valid values, see Supported instance types in Amazon OpenSearch Service . - Instance
Count int - The number of data nodes (instances) to use in the OpenSearch Service domain.
- Instance
Type string - The instance type for your data nodes, such as
m3.medium.search
. For valid values, see Supported instance types in Amazon OpenSearch Service . - Multi
Az boolWith Standby Enabled - Indicates whether Multi-AZ with Standby deployment option is enabled. For more information, see Multi-AZ with Standby .
- Warm
Count int - The number of warm nodes in the cluster.
- Warm
Enabled bool - Whether to enable UltraWarm storage for the cluster. See UltraWarm storage for Amazon OpenSearch Service .
- Warm
Type string - The instance type for the cluster's warm nodes.
- Zone
Awareness DomainConfig Zone Awareness Config - Specifies zone awareness configuration options. Only use if
ZoneAwarenessEnabled
istrue
. - Zone
Awareness boolEnabled - Indicates whether to enable zone awareness for the OpenSearch Service domain. When you enable zone awareness, OpenSearch Service allocates the nodes and replica index shards that belong to a cluster across two Availability Zones (AZs) in the same region to prevent data loss and minimize downtime in the event of node or data center failure. Don't enable zone awareness if your cluster has no replica index shards or is a single-node cluster. For more information, see Configuring a multi-AZ domain in Amazon OpenSearch Service .
- cold
Storage DomainOptions Cold Storage Options - Container for cold storage configuration options.
- dedicated
Master IntegerCount - The number of instances to use for the master node. If you specify this property, you must specify
true
for theDedicatedMasterEnabled
property. - dedicated
Master BooleanEnabled - Indicates whether to use a dedicated master node for the OpenSearch Service domain. A dedicated master node is a cluster node that performs cluster management tasks, but doesn't hold data or respond to data upload requests. Dedicated master nodes offload cluster management tasks to increase the stability of your search clusters. See Dedicated master nodes in Amazon OpenSearch Service .
- dedicated
Master StringType - The hardware configuration of the computer that hosts the dedicated master node, such as
m3.medium.search
. If you specify this property, you must specifytrue
for theDedicatedMasterEnabled
property. For valid values, see Supported instance types in Amazon OpenSearch Service . - instance
Count Integer - The number of data nodes (instances) to use in the OpenSearch Service domain.
- instance
Type String - The instance type for your data nodes, such as
m3.medium.search
. For valid values, see Supported instance types in Amazon OpenSearch Service . - multi
Az BooleanWith Standby Enabled - Indicates whether Multi-AZ with Standby deployment option is enabled. For more information, see Multi-AZ with Standby .
- warm
Count Integer - The number of warm nodes in the cluster.
- warm
Enabled Boolean - Whether to enable UltraWarm storage for the cluster. See UltraWarm storage for Amazon OpenSearch Service .
- warm
Type String - The instance type for the cluster's warm nodes.
- zone
Awareness DomainConfig Zone Awareness Config - Specifies zone awareness configuration options. Only use if
ZoneAwarenessEnabled
istrue
. - zone
Awareness BooleanEnabled - Indicates whether to enable zone awareness for the OpenSearch Service domain. When you enable zone awareness, OpenSearch Service allocates the nodes and replica index shards that belong to a cluster across two Availability Zones (AZs) in the same region to prevent data loss and minimize downtime in the event of node or data center failure. Don't enable zone awareness if your cluster has no replica index shards or is a single-node cluster. For more information, see Configuring a multi-AZ domain in Amazon OpenSearch Service .
- cold
Storage DomainOptions Cold Storage Options - Container for cold storage configuration options.
- dedicated
Master numberCount - The number of instances to use for the master node. If you specify this property, you must specify
true
for theDedicatedMasterEnabled
property. - dedicated
Master booleanEnabled - Indicates whether to use a dedicated master node for the OpenSearch Service domain. A dedicated master node is a cluster node that performs cluster management tasks, but doesn't hold data or respond to data upload requests. Dedicated master nodes offload cluster management tasks to increase the stability of your search clusters. See Dedicated master nodes in Amazon OpenSearch Service .
- dedicated
Master stringType - The hardware configuration of the computer that hosts the dedicated master node, such as
m3.medium.search
. If you specify this property, you must specifytrue
for theDedicatedMasterEnabled
property. For valid values, see Supported instance types in Amazon OpenSearch Service . - instance
Count number - The number of data nodes (instances) to use in the OpenSearch Service domain.
- instance
Type string - The instance type for your data nodes, such as
m3.medium.search
. For valid values, see Supported instance types in Amazon OpenSearch Service . - multi
Az booleanWith Standby Enabled - Indicates whether Multi-AZ with Standby deployment option is enabled. For more information, see Multi-AZ with Standby .
- warm
Count number - The number of warm nodes in the cluster.
- warm
Enabled boolean - Whether to enable UltraWarm storage for the cluster. See UltraWarm storage for Amazon OpenSearch Service .
- warm
Type string - The instance type for the cluster's warm nodes.
- zone
Awareness DomainConfig Zone Awareness Config - Specifies zone awareness configuration options. Only use if
ZoneAwarenessEnabled
istrue
. - zone
Awareness booleanEnabled - Indicates whether to enable zone awareness for the OpenSearch Service domain. When you enable zone awareness, OpenSearch Service allocates the nodes and replica index shards that belong to a cluster across two Availability Zones (AZs) in the same region to prevent data loss and minimize downtime in the event of node or data center failure. Don't enable zone awareness if your cluster has no replica index shards or is a single-node cluster. For more information, see Configuring a multi-AZ domain in Amazon OpenSearch Service .
- cold_
storage_ Domainoptions Cold Storage Options - Container for cold storage configuration options.
- dedicated_
master_ intcount - The number of instances to use for the master node. If you specify this property, you must specify
true
for theDedicatedMasterEnabled
property. - dedicated_
master_ boolenabled - Indicates whether to use a dedicated master node for the OpenSearch Service domain. A dedicated master node is a cluster node that performs cluster management tasks, but doesn't hold data or respond to data upload requests. Dedicated master nodes offload cluster management tasks to increase the stability of your search clusters. See Dedicated master nodes in Amazon OpenSearch Service .
- dedicated_
master_ strtype - The hardware configuration of the computer that hosts the dedicated master node, such as
m3.medium.search
. If you specify this property, you must specifytrue
for theDedicatedMasterEnabled
property. For valid values, see Supported instance types in Amazon OpenSearch Service . - instance_
count int - The number of data nodes (instances) to use in the OpenSearch Service domain.
- instance_
type str - The instance type for your data nodes, such as
m3.medium.search
. For valid values, see Supported instance types in Amazon OpenSearch Service . - multi_
az_ boolwith_ standby_ enabled - Indicates whether Multi-AZ with Standby deployment option is enabled. For more information, see Multi-AZ with Standby .
- warm_
count int - The number of warm nodes in the cluster.
- warm_
enabled bool - Whether to enable UltraWarm storage for the cluster. See UltraWarm storage for Amazon OpenSearch Service .
- warm_
type str - The instance type for the cluster's warm nodes.
- zone_
awareness_ Domainconfig Zone Awareness Config - Specifies zone awareness configuration options. Only use if
ZoneAwarenessEnabled
istrue
. - zone_
awareness_ boolenabled - Indicates whether to enable zone awareness for the OpenSearch Service domain. When you enable zone awareness, OpenSearch Service allocates the nodes and replica index shards that belong to a cluster across two Availability Zones (AZs) in the same region to prevent data loss and minimize downtime in the event of node or data center failure. Don't enable zone awareness if your cluster has no replica index shards or is a single-node cluster. For more information, see Configuring a multi-AZ domain in Amazon OpenSearch Service .
- cold
Storage Property MapOptions - Container for cold storage configuration options.
- dedicated
Master NumberCount - The number of instances to use for the master node. If you specify this property, you must specify
true
for theDedicatedMasterEnabled
property. - dedicated
Master BooleanEnabled - Indicates whether to use a dedicated master node for the OpenSearch Service domain. A dedicated master node is a cluster node that performs cluster management tasks, but doesn't hold data or respond to data upload requests. Dedicated master nodes offload cluster management tasks to increase the stability of your search clusters. See Dedicated master nodes in Amazon OpenSearch Service .
- dedicated
Master StringType - The hardware configuration of the computer that hosts the dedicated master node, such as
m3.medium.search
. If you specify this property, you must specifytrue
for theDedicatedMasterEnabled
property. For valid values, see Supported instance types in Amazon OpenSearch Service . - instance
Count Number - The number of data nodes (instances) to use in the OpenSearch Service domain.
- instance
Type String - The instance type for your data nodes, such as
m3.medium.search
. For valid values, see Supported instance types in Amazon OpenSearch Service . - multi
Az BooleanWith Standby Enabled - Indicates whether Multi-AZ with Standby deployment option is enabled. For more information, see Multi-AZ with Standby .
- warm
Count Number - The number of warm nodes in the cluster.
- warm
Enabled Boolean - Whether to enable UltraWarm storage for the cluster. See UltraWarm storage for Amazon OpenSearch Service .
- warm
Type String - The instance type for the cluster's warm nodes.
- zone
Awareness Property MapConfig - Specifies zone awareness configuration options. Only use if
ZoneAwarenessEnabled
istrue
. - zone
Awareness BooleanEnabled - Indicates whether to enable zone awareness for the OpenSearch Service domain. When you enable zone awareness, OpenSearch Service allocates the nodes and replica index shards that belong to a cluster across two Availability Zones (AZs) in the same region to prevent data loss and minimize downtime in the event of node or data center failure. Don't enable zone awareness if your cluster has no replica index shards or is a single-node cluster. For more information, see Configuring a multi-AZ domain in Amazon OpenSearch Service .
DomainCognitoOptions
- Enabled bool
- Whether to enable or disable Amazon Cognito authentication for OpenSearch Dashboards. See Amazon Cognito authentication for OpenSearch Dashboards .
- Identity
Pool stringId The Amazon Cognito identity pool ID that you want OpenSearch Service to use for OpenSearch Dashboards authentication.
Required if you enabled Cognito Authentication for OpenSearch Dashboards.
- Role
Arn string The
AmazonOpenSearchServiceCognitoAccess
role that allows OpenSearch Service to configure your user pool and identity pool.Required if you enabled Cognito Authentication for OpenSearch Dashboards.
- User
Pool stringId The Amazon Cognito user pool ID that you want OpenSearch Service to use for OpenSearch Dashboards authentication.
Required if you enabled Cognito Authentication for OpenSearch Dashboards.
- Enabled bool
- Whether to enable or disable Amazon Cognito authentication for OpenSearch Dashboards. See Amazon Cognito authentication for OpenSearch Dashboards .
- Identity
Pool stringId The Amazon Cognito identity pool ID that you want OpenSearch Service to use for OpenSearch Dashboards authentication.
Required if you enabled Cognito Authentication for OpenSearch Dashboards.
- Role
Arn string The
AmazonOpenSearchServiceCognitoAccess
role that allows OpenSearch Service to configure your user pool and identity pool.Required if you enabled Cognito Authentication for OpenSearch Dashboards.
- User
Pool stringId The Amazon Cognito user pool ID that you want OpenSearch Service to use for OpenSearch Dashboards authentication.
Required if you enabled Cognito Authentication for OpenSearch Dashboards.
- enabled Boolean
- Whether to enable or disable Amazon Cognito authentication for OpenSearch Dashboards. See Amazon Cognito authentication for OpenSearch Dashboards .
- identity
Pool StringId The Amazon Cognito identity pool ID that you want OpenSearch Service to use for OpenSearch Dashboards authentication.
Required if you enabled Cognito Authentication for OpenSearch Dashboards.
- role
Arn String The
AmazonOpenSearchServiceCognitoAccess
role that allows OpenSearch Service to configure your user pool and identity pool.Required if you enabled Cognito Authentication for OpenSearch Dashboards.
- user
Pool StringId The Amazon Cognito user pool ID that you want OpenSearch Service to use for OpenSearch Dashboards authentication.
Required if you enabled Cognito Authentication for OpenSearch Dashboards.
- enabled boolean
- Whether to enable or disable Amazon Cognito authentication for OpenSearch Dashboards. See Amazon Cognito authentication for OpenSearch Dashboards .
- identity
Pool stringId The Amazon Cognito identity pool ID that you want OpenSearch Service to use for OpenSearch Dashboards authentication.
Required if you enabled Cognito Authentication for OpenSearch Dashboards.
- role
Arn string The
AmazonOpenSearchServiceCognitoAccess
role that allows OpenSearch Service to configure your user pool and identity pool.Required if you enabled Cognito Authentication for OpenSearch Dashboards.
- user
Pool stringId The Amazon Cognito user pool ID that you want OpenSearch Service to use for OpenSearch Dashboards authentication.
Required if you enabled Cognito Authentication for OpenSearch Dashboards.
- enabled bool
- Whether to enable or disable Amazon Cognito authentication for OpenSearch Dashboards. See Amazon Cognito authentication for OpenSearch Dashboards .
- identity_
pool_ strid The Amazon Cognito identity pool ID that you want OpenSearch Service to use for OpenSearch Dashboards authentication.
Required if you enabled Cognito Authentication for OpenSearch Dashboards.
- role_
arn str The
AmazonOpenSearchServiceCognitoAccess
role that allows OpenSearch Service to configure your user pool and identity pool.Required if you enabled Cognito Authentication for OpenSearch Dashboards.
- user_
pool_ strid The Amazon Cognito user pool ID that you want OpenSearch Service to use for OpenSearch Dashboards authentication.
Required if you enabled Cognito Authentication for OpenSearch Dashboards.
- enabled Boolean
- Whether to enable or disable Amazon Cognito authentication for OpenSearch Dashboards. See Amazon Cognito authentication for OpenSearch Dashboards .
- identity
Pool StringId The Amazon Cognito identity pool ID that you want OpenSearch Service to use for OpenSearch Dashboards authentication.
Required if you enabled Cognito Authentication for OpenSearch Dashboards.
- role
Arn String The
AmazonOpenSearchServiceCognitoAccess
role that allows OpenSearch Service to configure your user pool and identity pool.Required if you enabled Cognito Authentication for OpenSearch Dashboards.
- user
Pool StringId The Amazon Cognito user pool ID that you want OpenSearch Service to use for OpenSearch Dashboards authentication.
Required if you enabled Cognito Authentication for OpenSearch Dashboards.
DomainColdStorageOptions
- Enabled bool
- Whether to enable or disable cold storage on the domain. You must enable UltraWarm storage to enable cold storage.
- Enabled bool
- Whether to enable or disable cold storage on the domain. You must enable UltraWarm storage to enable cold storage.
- enabled Boolean
- Whether to enable or disable cold storage on the domain. You must enable UltraWarm storage to enable cold storage.
- enabled boolean
- Whether to enable or disable cold storage on the domain. You must enable UltraWarm storage to enable cold storage.
- enabled bool
- Whether to enable or disable cold storage on the domain. You must enable UltraWarm storage to enable cold storage.
- enabled Boolean
- Whether to enable or disable cold storage on the domain. You must enable UltraWarm storage to enable cold storage.
DomainEbsOptions
- Ebs
Enabled bool - Specifies whether Amazon EBS volumes are attached to data nodes in the OpenSearch Service domain.
- Iops int
- The number of I/O operations per second (IOPS) that the volume supports. This property applies only to the
gp3
and provisioned IOPS EBS volume types. - Throughput int
- The throughput (in MiB/s) of the EBS volumes attached to data nodes. Applies only to the
gp3
volume type. - Volume
Size int - The size (in GiB) of the EBS volume for each data node. The minimum and maximum size of an EBS volume depends on the EBS volume type and the instance type to which it is attached. For more information, see EBS volume size limits in the Amazon OpenSearch Service Developer Guide .
- Volume
Type string - The EBS volume type to use with the OpenSearch Service domain. If you choose
gp3
, you must also specify values forIops
andThroughput
. For more information about each type, see Amazon EBS volume types in the Amazon EC2 User Guide for Linux Instances .
- Ebs
Enabled bool - Specifies whether Amazon EBS volumes are attached to data nodes in the OpenSearch Service domain.
- Iops int
- The number of I/O operations per second (IOPS) that the volume supports. This property applies only to the
gp3
and provisioned IOPS EBS volume types. - Throughput int
- The throughput (in MiB/s) of the EBS volumes attached to data nodes. Applies only to the
gp3
volume type. - Volume
Size int - The size (in GiB) of the EBS volume for each data node. The minimum and maximum size of an EBS volume depends on the EBS volume type and the instance type to which it is attached. For more information, see EBS volume size limits in the Amazon OpenSearch Service Developer Guide .
- Volume
Type string - The EBS volume type to use with the OpenSearch Service domain. If you choose
gp3
, you must also specify values forIops
andThroughput
. For more information about each type, see Amazon EBS volume types in the Amazon EC2 User Guide for Linux Instances .
- ebs
Enabled Boolean - Specifies whether Amazon EBS volumes are attached to data nodes in the OpenSearch Service domain.
- iops Integer
- The number of I/O operations per second (IOPS) that the volume supports. This property applies only to the
gp3
and provisioned IOPS EBS volume types. - throughput Integer
- The throughput (in MiB/s) of the EBS volumes attached to data nodes. Applies only to the
gp3
volume type. - volume
Size Integer - The size (in GiB) of the EBS volume for each data node. The minimum and maximum size of an EBS volume depends on the EBS volume type and the instance type to which it is attached. For more information, see EBS volume size limits in the Amazon OpenSearch Service Developer Guide .
- volume
Type String - The EBS volume type to use with the OpenSearch Service domain. If you choose
gp3
, you must also specify values forIops
andThroughput
. For more information about each type, see Amazon EBS volume types in the Amazon EC2 User Guide for Linux Instances .
- ebs
Enabled boolean - Specifies whether Amazon EBS volumes are attached to data nodes in the OpenSearch Service domain.
- iops number
- The number of I/O operations per second (IOPS) that the volume supports. This property applies only to the
gp3
and provisioned IOPS EBS volume types. - throughput number
- The throughput (in MiB/s) of the EBS volumes attached to data nodes. Applies only to the
gp3
volume type. - volume
Size number - The size (in GiB) of the EBS volume for each data node. The minimum and maximum size of an EBS volume depends on the EBS volume type and the instance type to which it is attached. For more information, see EBS volume size limits in the Amazon OpenSearch Service Developer Guide .
- volume
Type string - The EBS volume type to use with the OpenSearch Service domain. If you choose
gp3
, you must also specify values forIops
andThroughput
. For more information about each type, see Amazon EBS volume types in the Amazon EC2 User Guide for Linux Instances .
- ebs_
enabled bool - Specifies whether Amazon EBS volumes are attached to data nodes in the OpenSearch Service domain.
- iops int
- The number of I/O operations per second (IOPS) that the volume supports. This property applies only to the
gp3
and provisioned IOPS EBS volume types. - throughput int
- The throughput (in MiB/s) of the EBS volumes attached to data nodes. Applies only to the
gp3
volume type. - volume_
size int - The size (in GiB) of the EBS volume for each data node. The minimum and maximum size of an EBS volume depends on the EBS volume type and the instance type to which it is attached. For more information, see EBS volume size limits in the Amazon OpenSearch Service Developer Guide .
- volume_
type str - The EBS volume type to use with the OpenSearch Service domain. If you choose
gp3
, you must also specify values forIops
andThroughput
. For more information about each type, see Amazon EBS volume types in the Amazon EC2 User Guide for Linux Instances .
- ebs
Enabled Boolean - Specifies whether Amazon EBS volumes are attached to data nodes in the OpenSearch Service domain.
- iops Number
- The number of I/O operations per second (IOPS) that the volume supports. This property applies only to the
gp3
and provisioned IOPS EBS volume types. - throughput Number
- The throughput (in MiB/s) of the EBS volumes attached to data nodes. Applies only to the
gp3
volume type. - volume
Size Number - The size (in GiB) of the EBS volume for each data node. The minimum and maximum size of an EBS volume depends on the EBS volume type and the instance type to which it is attached. For more information, see EBS volume size limits in the Amazon OpenSearch Service Developer Guide .
- volume
Type String - The EBS volume type to use with the OpenSearch Service domain. If you choose
gp3
, you must also specify values forIops
andThroughput
. For more information about each type, see Amazon EBS volume types in the Amazon EC2 User Guide for Linux Instances .
DomainEncryptionAtRestOptions
- Enabled bool
Specify
true
to enable encryption at rest. Required if you enable fine-grained access control in AdvancedSecurityOptionsInput .If no encryption at rest options were initially specified in the template, updating this property by adding it causes no interruption. However, if you change this property after it's already been set within a template, the domain is deleted and recreated in order to modify the property.
- Kms
Key stringId The KMS key ID. Takes the form
1a2a3a4-1a2a-3a4a-5a6a-1a2a3a4a5a6a
. Required if you enable encryption at rest.You can also use
keyAlias
as a value.If no encryption at rest options were initially specified in the template, updating this property by adding it causes no interruption. However, if you change this property after it's already been set within a template, the domain is deleted and recreated in order to modify the property.
- Enabled bool
Specify
true
to enable encryption at rest. Required if you enable fine-grained access control in AdvancedSecurityOptionsInput .If no encryption at rest options were initially specified in the template, updating this property by adding it causes no interruption. However, if you change this property after it's already been set within a template, the domain is deleted and recreated in order to modify the property.
- Kms
Key stringId The KMS key ID. Takes the form
1a2a3a4-1a2a-3a4a-5a6a-1a2a3a4a5a6a
. Required if you enable encryption at rest.You can also use
keyAlias
as a value.If no encryption at rest options were initially specified in the template, updating this property by adding it causes no interruption. However, if you change this property after it's already been set within a template, the domain is deleted and recreated in order to modify the property.
- enabled Boolean
Specify
true
to enable encryption at rest. Required if you enable fine-grained access control in AdvancedSecurityOptionsInput .If no encryption at rest options were initially specified in the template, updating this property by adding it causes no interruption. However, if you change this property after it's already been set within a template, the domain is deleted and recreated in order to modify the property.
- kms
Key StringId The KMS key ID. Takes the form
1a2a3a4-1a2a-3a4a-5a6a-1a2a3a4a5a6a
. Required if you enable encryption at rest.You can also use
keyAlias
as a value.If no encryption at rest options were initially specified in the template, updating this property by adding it causes no interruption. However, if you change this property after it's already been set within a template, the domain is deleted and recreated in order to modify the property.
- enabled boolean
Specify
true
to enable encryption at rest. Required if you enable fine-grained access control in AdvancedSecurityOptionsInput .If no encryption at rest options were initially specified in the template, updating this property by adding it causes no interruption. However, if you change this property after it's already been set within a template, the domain is deleted and recreated in order to modify the property.
- kms
Key stringId The KMS key ID. Takes the form
1a2a3a4-1a2a-3a4a-5a6a-1a2a3a4a5a6a
. Required if you enable encryption at rest.You can also use
keyAlias
as a value.If no encryption at rest options were initially specified in the template, updating this property by adding it causes no interruption. However, if you change this property after it's already been set within a template, the domain is deleted and recreated in order to modify the property.
- enabled bool
Specify
true
to enable encryption at rest. Required if you enable fine-grained access control in AdvancedSecurityOptionsInput .If no encryption at rest options were initially specified in the template, updating this property by adding it causes no interruption. However, if you change this property after it's already been set within a template, the domain is deleted and recreated in order to modify the property.
- kms_
key_ strid The KMS key ID. Takes the form
1a2a3a4-1a2a-3a4a-5a6a-1a2a3a4a5a6a
. Required if you enable encryption at rest.You can also use
keyAlias
as a value.If no encryption at rest options were initially specified in the template, updating this property by adding it causes no interruption. However, if you change this property after it's already been set within a template, the domain is deleted and recreated in order to modify the property.
- enabled Boolean
Specify
true
to enable encryption at rest. Required if you enable fine-grained access control in AdvancedSecurityOptionsInput .If no encryption at rest options were initially specified in the template, updating this property by adding it causes no interruption. However, if you change this property after it's already been set within a template, the domain is deleted and recreated in order to modify the property.
- kms
Key StringId The KMS key ID. Takes the form
1a2a3a4-1a2a-3a4a-5a6a-1a2a3a4a5a6a
. Required if you enable encryption at rest.You can also use
keyAlias
as a value.If no encryption at rest options were initially specified in the template, updating this property by adding it causes no interruption. However, if you change this property after it's already been set within a template, the domain is deleted and recreated in order to modify the property.
DomainEndpointOptions
- Custom
Endpoint string - The fully qualified URL for your custom endpoint. Required if you enabled a custom endpoint for the domain.
- Custom
Endpoint stringCertificate Arn - The AWS Certificate Manager ARN for your domain's SSL/TLS certificate. Required if you enabled a custom endpoint for the domain.
- Custom
Endpoint boolEnabled - True to enable a custom endpoint for the domain. If enabled, you must also provide values for
CustomEndpoint
andCustomEndpointCertificateArn
. - Enforce
Https bool - True to require that all traffic to the domain arrive over HTTPS. Required if you enable fine-grained access control in AdvancedSecurityOptions .
- Tls
Security stringPolicy - The minimum TLS version required for traffic to the domain. The policy can be one of the following values:
- Policy-Min-TLS-1-0-2019-07: TLS security policy that supports TLS version 1.0 to TLS version 1.2
- Policy-Min-TLS-1-2-2019-07: TLS security policy that supports only TLS version 1.2
- Policy-Min-TLS-1-2-PFS-2023-10: TLS security policy that supports TLS version 1.2 to TLS version 1.3 with perfect forward secrecy cipher suites
- Custom
Endpoint string - The fully qualified URL for your custom endpoint. Required if you enabled a custom endpoint for the domain.
- Custom
Endpoint stringCertificate Arn - The AWS Certificate Manager ARN for your domain's SSL/TLS certificate. Required if you enabled a custom endpoint for the domain.
- Custom
Endpoint boolEnabled - True to enable a custom endpoint for the domain. If enabled, you must also provide values for
CustomEndpoint
andCustomEndpointCertificateArn
. - Enforce
Https bool - True to require that all traffic to the domain arrive over HTTPS. Required if you enable fine-grained access control in AdvancedSecurityOptions .
- Tls
Security stringPolicy - The minimum TLS version required for traffic to the domain. The policy can be one of the following values:
- Policy-Min-TLS-1-0-2019-07: TLS security policy that supports TLS version 1.0 to TLS version 1.2
- Policy-Min-TLS-1-2-2019-07: TLS security policy that supports only TLS version 1.2
- Policy-Min-TLS-1-2-PFS-2023-10: TLS security policy that supports TLS version 1.2 to TLS version 1.3 with perfect forward secrecy cipher suites
- custom
Endpoint String - The fully qualified URL for your custom endpoint. Required if you enabled a custom endpoint for the domain.
- custom
Endpoint StringCertificate Arn - The AWS Certificate Manager ARN for your domain's SSL/TLS certificate. Required if you enabled a custom endpoint for the domain.
- custom
Endpoint BooleanEnabled - True to enable a custom endpoint for the domain. If enabled, you must also provide values for
CustomEndpoint
andCustomEndpointCertificateArn
. - enforce
Https Boolean - True to require that all traffic to the domain arrive over HTTPS. Required if you enable fine-grained access control in AdvancedSecurityOptions .
- tls
Security StringPolicy - The minimum TLS version required for traffic to the domain. The policy can be one of the following values:
- Policy-Min-TLS-1-0-2019-07: TLS security policy that supports TLS version 1.0 to TLS version 1.2
- Policy-Min-TLS-1-2-2019-07: TLS security policy that supports only TLS version 1.2
- Policy-Min-TLS-1-2-PFS-2023-10: TLS security policy that supports TLS version 1.2 to TLS version 1.3 with perfect forward secrecy cipher suites
- custom
Endpoint string - The fully qualified URL for your custom endpoint. Required if you enabled a custom endpoint for the domain.
- custom
Endpoint stringCertificate Arn - The AWS Certificate Manager ARN for your domain's SSL/TLS certificate. Required if you enabled a custom endpoint for the domain.
- custom
Endpoint booleanEnabled - True to enable a custom endpoint for the domain. If enabled, you must also provide values for
CustomEndpoint
andCustomEndpointCertificateArn
. - enforce
Https boolean - True to require that all traffic to the domain arrive over HTTPS. Required if you enable fine-grained access control in AdvancedSecurityOptions .
- tls
Security stringPolicy - The minimum TLS version required for traffic to the domain. The policy can be one of the following values:
- Policy-Min-TLS-1-0-2019-07: TLS security policy that supports TLS version 1.0 to TLS version 1.2
- Policy-Min-TLS-1-2-2019-07: TLS security policy that supports only TLS version 1.2
- Policy-Min-TLS-1-2-PFS-2023-10: TLS security policy that supports TLS version 1.2 to TLS version 1.3 with perfect forward secrecy cipher suites
- custom_
endpoint str - The fully qualified URL for your custom endpoint. Required if you enabled a custom endpoint for the domain.
- custom_
endpoint_ strcertificate_ arn - The AWS Certificate Manager ARN for your domain's SSL/TLS certificate. Required if you enabled a custom endpoint for the domain.
- custom_
endpoint_ boolenabled - True to enable a custom endpoint for the domain. If enabled, you must also provide values for
CustomEndpoint
andCustomEndpointCertificateArn
. - enforce_
https bool - True to require that all traffic to the domain arrive over HTTPS. Required if you enable fine-grained access control in AdvancedSecurityOptions .
- tls_
security_ strpolicy - The minimum TLS version required for traffic to the domain. The policy can be one of the following values:
- Policy-Min-TLS-1-0-2019-07: TLS security policy that supports TLS version 1.0 to TLS version 1.2
- Policy-Min-TLS-1-2-2019-07: TLS security policy that supports only TLS version 1.2
- Policy-Min-TLS-1-2-PFS-2023-10: TLS security policy that supports TLS version 1.2 to TLS version 1.3 with perfect forward secrecy cipher suites
- custom
Endpoint String - The fully qualified URL for your custom endpoint. Required if you enabled a custom endpoint for the domain.
- custom
Endpoint StringCertificate Arn - The AWS Certificate Manager ARN for your domain's SSL/TLS certificate. Required if you enabled a custom endpoint for the domain.
- custom
Endpoint BooleanEnabled - True to enable a custom endpoint for the domain. If enabled, you must also provide values for
CustomEndpoint
andCustomEndpointCertificateArn
. - enforce
Https Boolean - True to require that all traffic to the domain arrive over HTTPS. Required if you enable fine-grained access control in AdvancedSecurityOptions .
- tls
Security StringPolicy - The minimum TLS version required for traffic to the domain. The policy can be one of the following values:
- Policy-Min-TLS-1-0-2019-07: TLS security policy that supports TLS version 1.0 to TLS version 1.2
- Policy-Min-TLS-1-2-2019-07: TLS security policy that supports only TLS version 1.2
- Policy-Min-TLS-1-2-PFS-2023-10: TLS security policy that supports TLS version 1.2 to TLS version 1.3 with perfect forward secrecy cipher suites
DomainIdentityCenterOptions
- Enabled
Api boolAccess - Whether Identity Center is enabled.
- Identity
Center stringApplication Arn - The ARN of the Identity Center application.
- Identity
Center stringInstance Arn - The ARN of the Identity Center instance.
- Identity
Store stringId - The IdentityStoreId for Identity Center options.
- Roles
Key Pulumi.Aws Native. Open Search Service. Domain Roles Key Idc Type - The roles key for Identity Center options.
- Subject
Key Pulumi.Aws Native. Open Search Service. Domain Subject Key Idc Type - The subject key for Identity Center options.
- Enabled
Api boolAccess - Whether Identity Center is enabled.
- Identity
Center stringApplication Arn - The ARN of the Identity Center application.
- Identity
Center stringInstance Arn - The ARN of the Identity Center instance.
- Identity
Store stringId - The IdentityStoreId for Identity Center options.
- Roles
Key DomainRoles Key Idc Type - The roles key for Identity Center options.
- Subject
Key DomainSubject Key Idc Type - The subject key for Identity Center options.
- enabled
Api BooleanAccess - Whether Identity Center is enabled.
- identity
Center StringApplication Arn - The ARN of the Identity Center application.
- identity
Center StringInstance Arn - The ARN of the Identity Center instance.
- identity
Store StringId - The IdentityStoreId for Identity Center options.
- roles
Key DomainRoles Key Idc Type - The roles key for Identity Center options.
- subject
Key DomainSubject Key Idc Type - The subject key for Identity Center options.
- enabled
Api booleanAccess - Whether Identity Center is enabled.
- identity
Center stringApplication Arn - The ARN of the Identity Center application.
- identity
Center stringInstance Arn - The ARN of the Identity Center instance.
- identity
Store stringId - The IdentityStoreId for Identity Center options.
- roles
Key DomainRoles Key Idc Type - The roles key for Identity Center options.
- subject
Key DomainSubject Key Idc Type - The subject key for Identity Center options.
- enabled_
api_ boolaccess - Whether Identity Center is enabled.
- identity_
center_ strapplication_ arn - The ARN of the Identity Center application.
- identity_
center_ strinstance_ arn - The ARN of the Identity Center instance.
- identity_
store_ strid - The IdentityStoreId for Identity Center options.
- roles_
key DomainRoles Key Idc Type - The roles key for Identity Center options.
- subject_
key DomainSubject Key Idc Type - The subject key for Identity Center options.
- enabled
Api BooleanAccess - Whether Identity Center is enabled.
- identity
Center StringApplication Arn - The ARN of the Identity Center application.
- identity
Center StringInstance Arn - The ARN of the Identity Center instance.
- identity
Store StringId - The IdentityStoreId for Identity Center options.
- roles
Key "GroupName" | "Group Id" - The roles key for Identity Center options.
- subject
Key "UserName" | "User Id" | "Email" - The subject key for Identity Center options.
DomainIdp
- Entity
Id string - The unique entity ID of the application in the SAML identity provider.
- Metadata
Content string - The metadata of the SAML application, in XML format.
- Entity
Id string - The unique entity ID of the application in the SAML identity provider.
- Metadata
Content string - The metadata of the SAML application, in XML format.
- entity
Id String - The unique entity ID of the application in the SAML identity provider.
- metadata
Content String - The metadata of the SAML application, in XML format.
- entity
Id string - The unique entity ID of the application in the SAML identity provider.
- metadata
Content string - The metadata of the SAML application, in XML format.
- entity_
id str - The unique entity ID of the application in the SAML identity provider.
- metadata_
content str - The metadata of the SAML application, in XML format.
- entity
Id String - The unique entity ID of the application in the SAML identity provider.
- metadata
Content String - The metadata of the SAML application, in XML format.
DomainJwtOptions
- Enabled bool
- Public
Key string - Roles
Key string - Subject
Key string
- Enabled bool
- Public
Key string - Roles
Key string - Subject
Key string
- enabled Boolean
- public
Key String - roles
Key String - subject
Key String
- enabled boolean
- public
Key string - roles
Key string - subject
Key string
- enabled bool
- public_
key str - roles_
key str - subject_
key str
- enabled Boolean
- public
Key String - roles
Key String - subject
Key String
DomainLogPublishingOption
- Cloud
Watch stringLogs Log Group Arn - Enabled bool
- Cloud
Watch stringLogs Log Group Arn - Enabled bool
- cloud
Watch StringLogs Log Group Arn - enabled Boolean
- cloud
Watch stringLogs Log Group Arn - enabled boolean
- cloud
Watch StringLogs Log Group Arn - enabled Boolean
DomainMasterUserOptions
- Master
User stringArn - Amazon Resource Name (ARN) for the master user. The ARN can point to an IAM user or role. This property is required for Amazon Cognito to work, and it must match the role configured for Cognito. Only specify if
InternalUserDatabaseEnabled
is false in AdvancedSecurityOptionsInput . - Master
User stringName Username for the master user. Only specify if
InternalUserDatabaseEnabled
is true in AdvancedSecurityOptionsInput .If you don't want to specify this value directly within the template, you can use a dynamic reference instead.
- Master
User stringPassword Password for the master user. Only specify if
InternalUserDatabaseEnabled
is true in AdvancedSecurityOptionsInput .If you don't want to specify this value directly within the template, you can use a dynamic reference instead.
- Master
User stringArn - Amazon Resource Name (ARN) for the master user. The ARN can point to an IAM user or role. This property is required for Amazon Cognito to work, and it must match the role configured for Cognito. Only specify if
InternalUserDatabaseEnabled
is false in AdvancedSecurityOptionsInput . - Master
User stringName Username for the master user. Only specify if
InternalUserDatabaseEnabled
is true in AdvancedSecurityOptionsInput .If you don't want to specify this value directly within the template, you can use a dynamic reference instead.
- Master
User stringPassword Password for the master user. Only specify if
InternalUserDatabaseEnabled
is true in AdvancedSecurityOptionsInput .If you don't want to specify this value directly within the template, you can use a dynamic reference instead.
- master
User StringArn - Amazon Resource Name (ARN) for the master user. The ARN can point to an IAM user or role. This property is required for Amazon Cognito to work, and it must match the role configured for Cognito. Only specify if
InternalUserDatabaseEnabled
is false in AdvancedSecurityOptionsInput . - master
User StringName Username for the master user. Only specify if
InternalUserDatabaseEnabled
is true in AdvancedSecurityOptionsInput .If you don't want to specify this value directly within the template, you can use a dynamic reference instead.
- master
User StringPassword Password for the master user. Only specify if
InternalUserDatabaseEnabled
is true in AdvancedSecurityOptionsInput .If you don't want to specify this value directly within the template, you can use a dynamic reference instead.
- master
User stringArn - Amazon Resource Name (ARN) for the master user. The ARN can point to an IAM user or role. This property is required for Amazon Cognito to work, and it must match the role configured for Cognito. Only specify if
InternalUserDatabaseEnabled
is false in AdvancedSecurityOptionsInput . - master
User stringName Username for the master user. Only specify if
InternalUserDatabaseEnabled
is true in AdvancedSecurityOptionsInput .If you don't want to specify this value directly within the template, you can use a dynamic reference instead.
- master
User stringPassword Password for the master user. Only specify if
InternalUserDatabaseEnabled
is true in AdvancedSecurityOptionsInput .If you don't want to specify this value directly within the template, you can use a dynamic reference instead.
- master_
user_ strarn - Amazon Resource Name (ARN) for the master user. The ARN can point to an IAM user or role. This property is required for Amazon Cognito to work, and it must match the role configured for Cognito. Only specify if
InternalUserDatabaseEnabled
is false in AdvancedSecurityOptionsInput . - master_
user_ strname Username for the master user. Only specify if
InternalUserDatabaseEnabled
is true in AdvancedSecurityOptionsInput .If you don't want to specify this value directly within the template, you can use a dynamic reference instead.
- master_
user_ strpassword Password for the master user. Only specify if
InternalUserDatabaseEnabled
is true in AdvancedSecurityOptionsInput .If you don't want to specify this value directly within the template, you can use a dynamic reference instead.
- master
User StringArn - Amazon Resource Name (ARN) for the master user. The ARN can point to an IAM user or role. This property is required for Amazon Cognito to work, and it must match the role configured for Cognito. Only specify if
InternalUserDatabaseEnabled
is false in AdvancedSecurityOptionsInput . - master
User StringName Username for the master user. Only specify if
InternalUserDatabaseEnabled
is true in AdvancedSecurityOptionsInput .If you don't want to specify this value directly within the template, you can use a dynamic reference instead.
- master
User StringPassword Password for the master user. Only specify if
InternalUserDatabaseEnabled
is true in AdvancedSecurityOptionsInput .If you don't want to specify this value directly within the template, you can use a dynamic reference instead.
DomainNodeToNodeEncryptionOptions
- Enabled bool
- Specifies to enable or disable node-to-node encryption on the domain. Required if you enable fine-grained access control in AdvancedSecurityOptionsInput .
- Enabled bool
- Specifies to enable or disable node-to-node encryption on the domain. Required if you enable fine-grained access control in AdvancedSecurityOptionsInput .
- enabled Boolean
- Specifies to enable or disable node-to-node encryption on the domain. Required if you enable fine-grained access control in AdvancedSecurityOptionsInput .
- enabled boolean
- Specifies to enable or disable node-to-node encryption on the domain. Required if you enable fine-grained access control in AdvancedSecurityOptionsInput .
- enabled bool
- Specifies to enable or disable node-to-node encryption on the domain. Required if you enable fine-grained access control in AdvancedSecurityOptionsInput .
- enabled Boolean
- Specifies to enable or disable node-to-node encryption on the domain. Required if you enable fine-grained access control in AdvancedSecurityOptionsInput .
DomainOffPeakWindow
- Window
Start Pulumi.Time Aws Native. Open Search Service. Inputs. Domain Window Start Time - The desired start time for an off-peak maintenance window.
- Window
Start DomainTime Window Start Time - The desired start time for an off-peak maintenance window.
- window
Start DomainTime Window Start Time - The desired start time for an off-peak maintenance window.
- window
Start DomainTime Window Start Time - The desired start time for an off-peak maintenance window.
- window_
start_ Domaintime Window Start Time - The desired start time for an off-peak maintenance window.
- window
Start Property MapTime - The desired start time for an off-peak maintenance window.
DomainOffPeakWindowOptions
- Enabled bool
- Specifies whether off-peak window settings are enabled for the domain.
- Off
Peak Pulumi.Window Aws Native. Open Search Service. Inputs. Domain Off Peak Window - Off-peak window settings for the domain.
- Enabled bool
- Specifies whether off-peak window settings are enabled for the domain.
- Off
Peak DomainWindow Off Peak Window - Off-peak window settings for the domain.
- enabled Boolean
- Specifies whether off-peak window settings are enabled for the domain.
- off
Peak DomainWindow Off Peak Window - Off-peak window settings for the domain.
- enabled boolean
- Specifies whether off-peak window settings are enabled for the domain.
- off
Peak DomainWindow Off Peak Window - Off-peak window settings for the domain.
- enabled bool
- Specifies whether off-peak window settings are enabled for the domain.
- off_
peak_ Domainwindow Off Peak Window - Off-peak window settings for the domain.
- enabled Boolean
- Specifies whether off-peak window settings are enabled for the domain.
- off
Peak Property MapWindow - Off-peak window settings for the domain.
DomainRolesKeyIdcType
DomainSamlOptions
- Enabled bool
- True to enable SAML authentication for a domain.
- Idp
Pulumi.
Aws Native. Open Search Service. Inputs. Domain Idp - The SAML Identity Provider's information.
- Master
Backend stringRole - The backend role that the SAML master user is mapped to.
- Master
User stringName - The SAML master user name, which is stored in the domain's internal user database.
- Roles
Key string - Element of the SAML assertion to use for backend roles. Default is
roles
. - Session
Timeout intMinutes - The duration, in minutes, after which a user session becomes inactive. Acceptable values are between 1 and 1440, and the default value is 60.
- Subject
Key string - Element of the SAML assertion to use for the user name. Default is
NameID
.
- Enabled bool
- True to enable SAML authentication for a domain.
- Idp
Domain
Idp - The SAML Identity Provider's information.
- Master
Backend stringRole - The backend role that the SAML master user is mapped to.
- Master
User stringName - The SAML master user name, which is stored in the domain's internal user database.
- Roles
Key string - Element of the SAML assertion to use for backend roles. Default is
roles
. - Session
Timeout intMinutes - The duration, in minutes, after which a user session becomes inactive. Acceptable values are between 1 and 1440, and the default value is 60.
- Subject
Key string - Element of the SAML assertion to use for the user name. Default is
NameID
.
- enabled Boolean
- True to enable SAML authentication for a domain.
- idp
Domain
Idp - The SAML Identity Provider's information.
- master
Backend StringRole - The backend role that the SAML master user is mapped to.
- master
User StringName - The SAML master user name, which is stored in the domain's internal user database.
- roles
Key String - Element of the SAML assertion to use for backend roles. Default is
roles
. - session
Timeout IntegerMinutes - The duration, in minutes, after which a user session becomes inactive. Acceptable values are between 1 and 1440, and the default value is 60.
- subject
Key String - Element of the SAML assertion to use for the user name. Default is
NameID
.
- enabled boolean
- True to enable SAML authentication for a domain.
- idp
Domain
Idp - The SAML Identity Provider's information.
- master
Backend stringRole - The backend role that the SAML master user is mapped to.
- master
User stringName - The SAML master user name, which is stored in the domain's internal user database.
- roles
Key string - Element of the SAML assertion to use for backend roles. Default is
roles
. - session
Timeout numberMinutes - The duration, in minutes, after which a user session becomes inactive. Acceptable values are between 1 and 1440, and the default value is 60.
- subject
Key string - Element of the SAML assertion to use for the user name. Default is
NameID
.
- enabled bool
- True to enable SAML authentication for a domain.
- idp
Domain
Idp - The SAML Identity Provider's information.
- master_
backend_ strrole - The backend role that the SAML master user is mapped to.
- master_
user_ strname - The SAML master user name, which is stored in the domain's internal user database.
- roles_
key str - Element of the SAML assertion to use for backend roles. Default is
roles
. - session_
timeout_ intminutes - The duration, in minutes, after which a user session becomes inactive. Acceptable values are between 1 and 1440, and the default value is 60.
- subject_
key str - Element of the SAML assertion to use for the user name. Default is
NameID
.
- enabled Boolean
- True to enable SAML authentication for a domain.
- idp Property Map
- The SAML Identity Provider's information.
- master
Backend StringRole - The backend role that the SAML master user is mapped to.
- master
User StringName - The SAML master user name, which is stored in the domain's internal user database.
- roles
Key String - Element of the SAML assertion to use for backend roles. Default is
roles
. - session
Timeout NumberMinutes - The duration, in minutes, after which a user session becomes inactive. Acceptable values are between 1 and 1440, and the default value is 60.
- subject
Key String - Element of the SAML assertion to use for the user name. Default is
NameID
.
DomainServiceSoftwareOptions
- Automated
Update stringDate - The timestamp, in Epoch time, until which you can manually request a service software update. After this date, we automatically update your service software.
- Cancellable bool
- True if you're able to cancel your service software version update. False if you can't cancel your service software update.
- Current
Version string - The current service software version present on the domain.
- Description string
- A description of the service software update status.
- New
Version string - The new service software version, if one is available.
- Optional
Deployment bool - True if a service software is never automatically updated. False if a service software is automatically updated after the automated update date.
- Update
Available bool - True if you're able to update your service software version. False if you can't update your service software version.
- Update
Status string - The status of your service software update.
- Automated
Update stringDate - The timestamp, in Epoch time, until which you can manually request a service software update. After this date, we automatically update your service software.
- Cancellable bool
- True if you're able to cancel your service software version update. False if you can't cancel your service software update.
- Current
Version string - The current service software version present on the domain.
- Description string
- A description of the service software update status.
- New
Version string - The new service software version, if one is available.
- Optional
Deployment bool - True if a service software is never automatically updated. False if a service software is automatically updated after the automated update date.
- Update
Available bool - True if you're able to update your service software version. False if you can't update your service software version.
- Update
Status string - The status of your service software update.
- automated
Update StringDate - The timestamp, in Epoch time, until which you can manually request a service software update. After this date, we automatically update your service software.
- cancellable Boolean
- True if you're able to cancel your service software version update. False if you can't cancel your service software update.
- current
Version String - The current service software version present on the domain.
- description String
- A description of the service software update status.
- new
Version String - The new service software version, if one is available.
- optional
Deployment Boolean - True if a service software is never automatically updated. False if a service software is automatically updated after the automated update date.
- update
Available Boolean - True if you're able to update your service software version. False if you can't update your service software version.
- update
Status String - The status of your service software update.
- automated
Update stringDate - The timestamp, in Epoch time, until which you can manually request a service software update. After this date, we automatically update your service software.
- cancellable boolean
- True if you're able to cancel your service software version update. False if you can't cancel your service software update.
- current
Version string - The current service software version present on the domain.
- description string
- A description of the service software update status.
- new
Version string - The new service software version, if one is available.
- optional
Deployment boolean - True if a service software is never automatically updated. False if a service software is automatically updated after the automated update date.
- update
Available boolean - True if you're able to update your service software version. False if you can't update your service software version.
- update
Status string - The status of your service software update.
- automated_
update_ strdate - The timestamp, in Epoch time, until which you can manually request a service software update. After this date, we automatically update your service software.
- cancellable bool
- True if you're able to cancel your service software version update. False if you can't cancel your service software update.
- current_
version str - The current service software version present on the domain.
- description str
- A description of the service software update status.
- new_
version str - The new service software version, if one is available.
- optional_
deployment bool - True if a service software is never automatically updated. False if a service software is automatically updated after the automated update date.
- update_
available bool - True if you're able to update your service software version. False if you can't update your service software version.
- update_
status str - The status of your service software update.
- automated
Update StringDate - The timestamp, in Epoch time, until which you can manually request a service software update. After this date, we automatically update your service software.
- cancellable Boolean
- True if you're able to cancel your service software version update. False if you can't cancel your service software update.
- current
Version String - The current service software version present on the domain.
- description String
- A description of the service software update status.
- new
Version String - The new service software version, if one is available.
- optional
Deployment Boolean - True if a service software is never automatically updated. False if a service software is automatically updated after the automated update date.
- update
Available Boolean - True if you're able to update your service software version. False if you can't update your service software version.
- update
Status String - The status of your service software update.
DomainSnapshotOptions
- Automated
Snapshot intStart Hour - The hour in UTC during which the service takes an automated daily snapshot of the indexes in the OpenSearch Service domain. For example, if you specify 0, OpenSearch Service takes an automated snapshot everyday between midnight and 1 am. You can specify a value between 0 and 23.
- Automated
Snapshot intStart Hour - The hour in UTC during which the service takes an automated daily snapshot of the indexes in the OpenSearch Service domain. For example, if you specify 0, OpenSearch Service takes an automated snapshot everyday between midnight and 1 am. You can specify a value between 0 and 23.
- automated
Snapshot IntegerStart Hour - The hour in UTC during which the service takes an automated daily snapshot of the indexes in the OpenSearch Service domain. For example, if you specify 0, OpenSearch Service takes an automated snapshot everyday between midnight and 1 am. You can specify a value between 0 and 23.
- automated
Snapshot numberStart Hour - The hour in UTC during which the service takes an automated daily snapshot of the indexes in the OpenSearch Service domain. For example, if you specify 0, OpenSearch Service takes an automated snapshot everyday between midnight and 1 am. You can specify a value between 0 and 23.
- automated_
snapshot_ intstart_ hour - The hour in UTC during which the service takes an automated daily snapshot of the indexes in the OpenSearch Service domain. For example, if you specify 0, OpenSearch Service takes an automated snapshot everyday between midnight and 1 am. You can specify a value between 0 and 23.
- automated
Snapshot NumberStart Hour - The hour in UTC during which the service takes an automated daily snapshot of the indexes in the OpenSearch Service domain. For example, if you specify 0, OpenSearch Service takes an automated snapshot everyday between midnight and 1 am. You can specify a value between 0 and 23.
DomainSoftwareUpdateOptions
- Auto
Software boolUpdate Enabled - Specifies whether automatic service software updates are enabled for the domain.
- Auto
Software boolUpdate Enabled - Specifies whether automatic service software updates are enabled for the domain.
- auto
Software BooleanUpdate Enabled - Specifies whether automatic service software updates are enabled for the domain.
- auto
Software booleanUpdate Enabled - Specifies whether automatic service software updates are enabled for the domain.
- auto_
software_ boolupdate_ enabled - Specifies whether automatic service software updates are enabled for the domain.
- auto
Software BooleanUpdate Enabled - Specifies whether automatic service software updates are enabled for the domain.
DomainSubjectKeyIdcType
DomainVpcOptions
- Security
Group List<string>Ids - The list of security group IDs that are associated with the VPC endpoints for the domain. If you don't provide a security group ID, OpenSearch Service uses the default security group for the VPC. To learn more, see Security groups for your VPC in the Amazon VPC User Guide .
- Subnet
Ids List<string> Provide one subnet ID for each Availability Zone that your domain uses. For example, you must specify three subnet IDs for a three-AZ domain. To learn more, see VPCs and subnets in the Amazon VPC User Guide .
If you specify more than one subnet, you must also configure
ZoneAwarenessEnabled
andZoneAwarenessConfig
within ClusterConfig , otherwise you'll see the error "You must specify exactly one subnet" during template creation.
- Security
Group []stringIds - The list of security group IDs that are associated with the VPC endpoints for the domain. If you don't provide a security group ID, OpenSearch Service uses the default security group for the VPC. To learn more, see Security groups for your VPC in the Amazon VPC User Guide .
- Subnet
Ids []string Provide one subnet ID for each Availability Zone that your domain uses. For example, you must specify three subnet IDs for a three-AZ domain. To learn more, see VPCs and subnets in the Amazon VPC User Guide .
If you specify more than one subnet, you must also configure
ZoneAwarenessEnabled
andZoneAwarenessConfig
within ClusterConfig , otherwise you'll see the error "You must specify exactly one subnet" during template creation.
- security
Group List<String>Ids - The list of security group IDs that are associated with the VPC endpoints for the domain. If you don't provide a security group ID, OpenSearch Service uses the default security group for the VPC. To learn more, see Security groups for your VPC in the Amazon VPC User Guide .
- subnet
Ids List<String> Provide one subnet ID for each Availability Zone that your domain uses. For example, you must specify three subnet IDs for a three-AZ domain. To learn more, see VPCs and subnets in the Amazon VPC User Guide .
If you specify more than one subnet, you must also configure
ZoneAwarenessEnabled
andZoneAwarenessConfig
within ClusterConfig , otherwise you'll see the error "You must specify exactly one subnet" during template creation.
- security
Group string[]Ids - The list of security group IDs that are associated with the VPC endpoints for the domain. If you don't provide a security group ID, OpenSearch Service uses the default security group for the VPC. To learn more, see Security groups for your VPC in the Amazon VPC User Guide .
- subnet
Ids string[] Provide one subnet ID for each Availability Zone that your domain uses. For example, you must specify three subnet IDs for a three-AZ domain. To learn more, see VPCs and subnets in the Amazon VPC User Guide .
If you specify more than one subnet, you must also configure
ZoneAwarenessEnabled
andZoneAwarenessConfig
within ClusterConfig , otherwise you'll see the error "You must specify exactly one subnet" during template creation.
- security_
group_ Sequence[str]ids - The list of security group IDs that are associated with the VPC endpoints for the domain. If you don't provide a security group ID, OpenSearch Service uses the default security group for the VPC. To learn more, see Security groups for your VPC in the Amazon VPC User Guide .
- subnet_
ids Sequence[str] Provide one subnet ID for each Availability Zone that your domain uses. For example, you must specify three subnet IDs for a three-AZ domain. To learn more, see VPCs and subnets in the Amazon VPC User Guide .
If you specify more than one subnet, you must also configure
ZoneAwarenessEnabled
andZoneAwarenessConfig
within ClusterConfig , otherwise you'll see the error "You must specify exactly one subnet" during template creation.
- security
Group List<String>Ids - The list of security group IDs that are associated with the VPC endpoints for the domain. If you don't provide a security group ID, OpenSearch Service uses the default security group for the VPC. To learn more, see Security groups for your VPC in the Amazon VPC User Guide .
- subnet
Ids List<String> Provide one subnet ID for each Availability Zone that your domain uses. For example, you must specify three subnet IDs for a three-AZ domain. To learn more, see VPCs and subnets in the Amazon VPC User Guide .
If you specify more than one subnet, you must also configure
ZoneAwarenessEnabled
andZoneAwarenessConfig
within ClusterConfig , otherwise you'll see the error "You must specify exactly one subnet" during template creation.
DomainWindowStartTime
DomainZoneAwarenessConfig
- Availability
Zone intCount If you enabled multiple Availability Zones (AZs), the number of AZs that you want the domain to use.
Valid values are
2
and3
. Default is 2.
- Availability
Zone intCount If you enabled multiple Availability Zones (AZs), the number of AZs that you want the domain to use.
Valid values are
2
and3
. Default is 2.
- availability
Zone IntegerCount If you enabled multiple Availability Zones (AZs), the number of AZs that you want the domain to use.
Valid values are
2
and3
. Default is 2.
- availability
Zone numberCount If you enabled multiple Availability Zones (AZs), the number of AZs that you want the domain to use.
Valid values are
2
and3
. Default is 2.
- availability_
zone_ intcount If you enabled multiple Availability Zones (AZs), the number of AZs that you want the domain to use.
Valid values are
2
and3
. Default is 2.
- availability
Zone NumberCount If you enabled multiple Availability Zones (AZs), the number of AZs that you want the domain to use.
Valid values are
2
and3
. Default is 2.
Tag
Package Details
- Repository
- AWS Native pulumi/pulumi-aws-native
- License
- Apache-2.0
We recommend new projects start with resources from the AWS provider.