software.amazon.awscdk.services.opensearchservice

Interface AdvancedSecurityOptions

All Known Implementing Classes:

AdvancedSecurityOptions.Jsii$Proxy

@Generated(value="jsii-pacmak/1.73.0 (build 6faeda3)",
           date="2023-01-25T18:29:08.087Z")
public interface AdvancedSecurityOptions

Specifies options for fine-grained access control.

Example:

 Domain domain = Domain.Builder.create(this, "Domain")
         .version(EngineVersion.OPENSEARCH_1_0)
         .enforceHttps(true)
         .nodeToNodeEncryption(true)
         .encryptionAtRest(EncryptionAtRestOptions.builder()
                 .enabled(true)
                 .build())
         .fineGrainedAccessControl(AdvancedSecurityOptions.builder()
                 .masterUserName("master-user")
                 .build())
         .logging(LoggingOptions.builder()
                 .auditLogEnabled(true)
                 .slowSearchLogEnabled(true)
                 .appLogEnabled(true)
                 .slowIndexLogEnabled(true)
                 .build())
         .build();
 

Nested Class Summary

Nested Classes

Modifier and Type	Interface and Description
static class	AdvancedSecurityOptions.Builder A builder for AdvancedSecurityOptions
static class	AdvancedSecurityOptions.Jsii$Proxy An implementation for AdvancedSecurityOptions

Method Summary

Modifier and Type	Method and Description
static AdvancedSecurityOptions.Builder	builder()
default java.lang.String	getMasterUserArn() ARN for the master user.
default java.lang.String	getMasterUserName() Username for the master user.
default SecretValue	getMasterUserPassword() Password for the master user.

Method Detail

getMasterUserArn

default java.lang.String getMasterUserArn()

ARN for the master user.

Only specify this or masterUserName, but not both.

Default: - fine-grained access control is disabled

getMasterUserName

default java.lang.String getMasterUserName()

Username for the master user.

Only specify this or masterUserArn, but not both.

Default: - fine-grained access control is disabled

getMasterUserPassword

default SecretValue getMasterUserPassword()

Password for the master user.

You can use SecretValue.unsafePlainText to specify a password in plain text or use secretsmanager.Secret.fromSecretAttributes to reference a secret in Secrets Manager.

Default: - A Secrets Manager generated password

builder

static AdvancedSecurityOptions.Builder builder()

Returns:

a AdvancedSecurityOptions.Builder of AdvancedSecurityOptions