aws-cdk-lib.aws_elasticsearch.CfnDomain.AdvancedSecurityOptionsInputProperty

interface AdvancedSecurityOptionsInputProperty

LanguageType name
.NETAmazon.CDK.AWS.Elasticsearch.CfnDomain.AdvancedSecurityOptionsInputProperty
Gogithub.com/aws/aws-cdk-go/awscdk/v2/awselasticsearch#CfnDomain_AdvancedSecurityOptionsInputProperty
Javasoftware.amazon.awscdk.services.elasticsearch.CfnDomain.AdvancedSecurityOptionsInputProperty
Pythonaws_cdk.aws_elasticsearch.CfnDomain.AdvancedSecurityOptionsInputProperty
TypeScript aws-cdk-lib » aws_elasticsearch » CfnDomain » AdvancedSecurityOptionsInputProperty

Specifies options for fine-grained access control.

The AWS::Elasticsearch::Domain resource is being replaced by the AWS::OpenSearchService::Domain resource. While the legacy Elasticsearch resource and options are still supported, we recommend modifying your existing Cloudformation templates to use the new OpenSearch Service resource, which supports both OpenSearch and Elasticsearch. For more information about the service rename, see New resource types in the Amazon OpenSearch Service Developer Guide .

Example

// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import { aws_elasticsearch as elasticsearch } from 'aws-cdk-lib';
const advancedSecurityOptionsInputProperty: elasticsearch.CfnDomain.AdvancedSecurityOptionsInputProperty = {
  anonymousAuthEnabled: false,
  enabled: false,
  internalUserDatabaseEnabled: false,
  masterUserOptions: {
    masterUserArn: 'masterUserArn',
    masterUserName: 'masterUserName',
    masterUserPassword: 'masterUserPassword',
  },
};

Properties

NameTypeDescription
anonymousAuthEnabled?boolean | IResolvableCfnDomain.AdvancedSecurityOptionsInputProperty.AnonymousAuthEnabled.
enabled?boolean | IResolvableTrue to enable fine-grained access control.
internalUserDatabaseEnabled?boolean | IResolvableTrue to enable the internal user database.
masterUserOptions?IResolvable | MasterUserOptionsPropertySpecifies information about the master user.

anonymousAuthEnabled?

Type: boolean | IResolvable (optional)

CfnDomain.AdvancedSecurityOptionsInputProperty.AnonymousAuthEnabled.


enabled?

Type: boolean | IResolvable (optional)

True to enable fine-grained access control.

You must also enable encryption of data at rest and node-to-node encryption.


internalUserDatabaseEnabled?

Type: boolean | IResolvable (optional)

True to enable the internal user database.


masterUserOptions?

Type: IResolvable | MasterUserOptionsProperty (optional)

Specifies information about the master user.