AWS documentation: Amazon Cognito Authentication for Kibana
AWS documentation: VPC Support for Amazon OpenSearch Service Domains
resource "aws_opensearch_domain" "example" {
domain_name = "example"
engine_version = "Elasticsearch_7.10"
cluster_config {
instance_type = "r4.large.search"
}
tags = {
Domain = "TestDomain"
}
}
create-domain
--domain-name <value>
[--engine-version <value>]
[--cluster-config <value>]
[--ebs-options <value>]
[--access-policies <value>]
[--snapshot-options <value>]
[--vpc-options <value>]
[--cognito-options <value>]
[--encryption-at-rest-options <value>]
[--node-to-node-encryption-options <value>]
[--advanced-options <value>]
[--log-publishing-options <value>]
[--domain-endpoint-options <value>]
[--advanced-security-options <value>]
[--tag-list <value>]
[--auto-tune-options <value>]
[--cli-input-json | --cli-input-yaml]
[--generate-cli-skeleton <value>]
[--debug]
[--endpoint-url <value>]
[--no-verify-ssl]
[--no-paginate]
[--output <value>]
[--query <value>]
[--profile <value>]
[--region <value>]
[--version <value>]
[--color <value>]
[--no-sign-request]
[--ca-bundle <value>]
[--cli-read-timeout <value>]
[--cli-connect-timeout <value>]
[--cli-binary-format <value>]
[--no-cli-pager]
[--cli-auto-prompt]
[--no-cli-auto-prompt]
aws opensearch create-domain --domain-name my-domain --engine-version "OpenSearch_1.0" --node-to-node-encryption-options Enabled=true --encryption-at-rest-options Enabled=true --node-type data --instance-count 3 --master-node-type r5.large.elasticsearch --master-node-count 3 --ebs-options EBSEnabled=true,VolumeType=gp2,VolumeSize=10 --access-policies file://access-policy.json --advanced-security-options Enabled=true --tag-specifications "ResourceType=opensearch-domain,Tags=[{Key=Environment,Value=Development},{Key=Owner,Value=MyTeam}]"
ESInstance:<Instance_Type>
ES:GP2-Storage
ES:GP3-Storage
DataTransfer-Regional-Bytes
AWS-Out-Bytes
Categorized by Availability, Security & Compliance and Cost
