This template creates an OpenSearch Service domain with fine-grained access control. The domain is configured with two data nodes and three dedicated master nodes. It has 10 GiB of storage and enables EBS. The access policy allows a specific IAM role to perform all actions on the domain. Advanced security options are enabled with an internal user database and a master user with a specified username and password stored in the Secret created in the template.

OpenSearchServiceDomain
AWS::OpenSearchService::Domain


AdvancedSecurityOptions
MasterUserOptions
SAMLOptions
Idp
ClusterConfig
ZoneAwarenessConfig
EBSOptions

Secret
AWS::SecretsManager::Secret


GenerateSecretString

CloudFormation Template

Share Template