Class CfnDomain
java.lang.Object
software.amazon.jsii.JsiiObject
software.constructs.Construct
software.amazon.awscdk.CfnElement
software.amazon.awscdk.CfnRefElement
software.amazon.awscdk.CfnResource
software.amazon.awscdk.services.opensearchservice.CfnDomain
- All Implemented Interfaces:
IInspectable
,ITaggable
,software.amazon.jsii.JsiiSerializable
,software.constructs.IConstruct
,software.constructs.IDependable
@Generated(value="jsii-pacmak/1.104.0 (build e79254c)",
date="2025-01-15T21:09:22.569Z")
@Stability(Stable)
public class CfnDomain
extends CfnResource
implements IInspectable, ITaggable
The AWS::OpenSearchService::Domain resource creates an Amazon OpenSearch Service domain.
Example:
// The code below shows an example of how to instantiate this type. // The values are placeholders you should change. import software.amazon.awscdk.services.opensearchservice.*; Object accessPolicies; CfnDomain cfnDomain = CfnDomain.Builder.create(this, "MyCfnDomain") .accessPolicies(accessPolicies) .advancedOptions(Map.of( "advancedOptionsKey", "advancedOptions")) .advancedSecurityOptions(AdvancedSecurityOptionsInputProperty.builder() .anonymousAuthDisableDate("anonymousAuthDisableDate") .anonymousAuthEnabled(false) .enabled(false) .internalUserDatabaseEnabled(false) .jwtOptions(JWTOptionsProperty.builder() .enabled(false) .publicKey("publicKey") .rolesKey("rolesKey") .subjectKey("subjectKey") .build()) .masterUserOptions(MasterUserOptionsProperty.builder() .masterUserArn("masterUserArn") .masterUserName("masterUserName") .masterUserPassword("masterUserPassword") .build()) .samlOptions(SAMLOptionsProperty.builder() .enabled(false) .idp(IdpProperty.builder() .entityId("entityId") .metadataContent("metadataContent") .build()) .masterBackendRole("masterBackendRole") .masterUserName("masterUserName") .rolesKey("rolesKey") .sessionTimeoutMinutes(123) .subjectKey("subjectKey") .build()) .build()) .clusterConfig(ClusterConfigProperty.builder() .coldStorageOptions(ColdStorageOptionsProperty.builder() .enabled(false) .build()) .dedicatedMasterCount(123) .dedicatedMasterEnabled(false) .dedicatedMasterType("dedicatedMasterType") .instanceCount(123) .instanceType("instanceType") .multiAzWithStandbyEnabled(false) .nodeOptions(List.of(NodeOptionProperty.builder() .nodeConfig(NodeConfigProperty.builder() .count(123) .enabled(false) .type("type") .build()) .nodeType("nodeType") .build())) .warmCount(123) .warmEnabled(false) .warmType("warmType") .zoneAwarenessConfig(ZoneAwarenessConfigProperty.builder() .availabilityZoneCount(123) .build()) .zoneAwarenessEnabled(false) .build()) .cognitoOptions(CognitoOptionsProperty.builder() .enabled(false) .identityPoolId("identityPoolId") .roleArn("roleArn") .userPoolId("userPoolId") .build()) .domainArn("domainArn") .domainEndpointOptions(DomainEndpointOptionsProperty.builder() .customEndpoint("customEndpoint") .customEndpointCertificateArn("customEndpointCertificateArn") .customEndpointEnabled(false) .enforceHttps(false) .tlsSecurityPolicy("tlsSecurityPolicy") .build()) .domainName("domainName") .ebsOptions(EBSOptionsProperty.builder() .ebsEnabled(false) .iops(123) .throughput(123) .volumeSize(123) .volumeType("volumeType") .build()) .encryptionAtRestOptions(EncryptionAtRestOptionsProperty.builder() .enabled(false) .kmsKeyId("kmsKeyId") .build()) .engineVersion("engineVersion") .identityCenterOptions(IdentityCenterOptionsProperty.builder() .enabledApiAccess(false) .identityCenterApplicationArn("identityCenterApplicationArn") .identityCenterInstanceArn("identityCenterInstanceArn") .identityStoreId("identityStoreId") .rolesKey("rolesKey") .subjectKey("subjectKey") .build()) .ipAddressType("ipAddressType") .logPublishingOptions(Map.of( "logPublishingOptionsKey", LogPublishingOptionProperty.builder() .cloudWatchLogsLogGroupArn("cloudWatchLogsLogGroupArn") .enabled(false) .build())) .nodeToNodeEncryptionOptions(NodeToNodeEncryptionOptionsProperty.builder() .enabled(false) .build()) .offPeakWindowOptions(OffPeakWindowOptionsProperty.builder() .enabled(false) .offPeakWindow(OffPeakWindowProperty.builder() .windowStartTime(WindowStartTimeProperty.builder() .hours(123) .minutes(123) .build()) .build()) .build()) .skipShardMigrationWait(false) .snapshotOptions(SnapshotOptionsProperty.builder() .automatedSnapshotStartHour(123) .build()) .softwareUpdateOptions(SoftwareUpdateOptionsProperty.builder() .autoSoftwareUpdateEnabled(false) .build()) .tags(List.of(CfnTag.builder() .key("key") .value("value") .build())) .vpcOptions(VPCOptionsProperty.builder() .securityGroupIds(List.of("securityGroupIds")) .subnetIds(List.of("subnetIds")) .build()) .build();
- See Also:
-
Nested Class Summary
Modifier and TypeClassDescriptionstatic interface
Specifies options for fine-grained access control.static final class
A fluent builder forCfnDomain
.static interface
The cluster configuration for the OpenSearch Service domain.static interface
Configures OpenSearch Service to use Amazon Cognito authentication for OpenSearch Dashboards.static interface
Container for the parameters required to enable cold storage for an OpenSearch Service domain.static interface
Specifies additional options for the domain endpoint, such as whether to require HTTPS for all traffic or whether to use a custom endpoint rather than the default endpoint.static interface
The configurations of Amazon Elastic Block Store (Amazon EBS) volumes that are attached to data nodes in the OpenSearch Service domain.static interface
Whether the domain should encrypt data at rest, and if so, the AWS Key Management Service key to use.static interface
Container for IAM Identity Center Options settings.static interface
The SAML Identity Provider's information.static interface
Example:static interface
Specifies whether the OpenSearch Service domain publishes application, search slow logs, or index slow logs to Amazon CloudWatch.static interface
Specifies information about the master user.static interface
Container for specifying configuration of any node type.static interface
Container for specifying node type.static interface
Specifies options for node-to-node encryption.static interface
Off-peak window settings for the domain.static interface
A custom 10-hour, low-traffic window during which OpenSearch Service can perform mandatory configuration changes on the domain.static interface
Container for information about the SAML configuration for OpenSearch Dashboards.static interface
The current status of the service software for an Amazon OpenSearch Service domain.static interface
DEPRECATED .static interface
Options for configuring service software updates for a domain.static interface
The virtual private cloud (VPC) configuration for the OpenSearch Service domain.static interface
A custom start time for the off-peak window, in Coordinated Universal Time (UTC).static interface
Specifies zone awareness configuration options.Nested classes/interfaces inherited from class software.amazon.jsii.JsiiObject
software.amazon.jsii.JsiiObject.InitializationMode
Nested classes/interfaces inherited from interface software.constructs.IConstruct
software.constructs.IConstruct.Jsii$Default
Nested classes/interfaces inherited from interface software.amazon.awscdk.IInspectable
IInspectable.Jsii$Default, IInspectable.Jsii$Proxy
Nested classes/interfaces inherited from interface software.amazon.awscdk.ITaggable
ITaggable.Jsii$Default, ITaggable.Jsii$Proxy
-
Field Summary
Modifier and TypeFieldDescriptionstatic final String
The CloudFormation resource type name for this resource class. -
Constructor Summary
ModifierConstructorDescriptionprotected
CfnDomain
(software.amazon.jsii.JsiiObject.InitializationMode initializationMode) protected
CfnDomain
(software.amazon.jsii.JsiiObjectRef objRef) CfnDomain
(software.constructs.Construct scope, String id, CfnDomainProps props) -
Method Summary
Modifier and TypeMethodDescriptionAn AWS Identity and Access Management ( IAM ) policy document that specifies who can access the OpenSearch Service domain and their permissions.Additional options to specify for the OpenSearch Service domain.Specifies options for fine-grained access control and SAML authentication.Date and time when the migration period will be disabled.The Amazon Resource Name (ARN) of the CloudFormation stack.The domain-specific endpoint used for requests to the OpenSearch APIs, such assearch-mystack-1ab2cdefghij-ab1c2deckoyb3hofw7wpqa3cm.us-west-1.es.amazonaws.com
.IfIPAddressType
to set todualstack
, a version 2 domain endpoint is provisioned.The resource ID.The ARN for IAM Identity Center Application which will integrate with Amazon OpenSearch Service.The ID of IAM Identity Store.Container for the cluster configuration of a domain.Configures OpenSearch Service to use Amazon Cognito authentication for OpenSearch Dashboards.Specifies additional options for the domain endpoint, such as whether to require HTTPS for all traffic or whether to use a custom endpoint rather than the default endpoint.A name for the OpenSearch Service domain.The configurations of Amazon Elastic Block Store (Amazon EBS) volumes that are attached to data nodes in the OpenSearch Service domain.Whether the domain should encrypt data at rest, and if so, the AWS KMS key to use.The version of OpenSearch to use.Container for IAM Identity Center Option control for the domain.Choose either dual stack or IPv4 as your IP address type.An object with one or more of the following keys:SEARCH_SLOW_LOGS
,ES_APPLICATION_LOGS
,INDEX_SLOW_LOGS
,AUDIT_LOGS
, depending on the types of logs you want to publish.Specifies whether node-to-node encryption is enabled.Options for a domain's off-peak window, during which OpenSearch Service can perform mandatory configuration changes on the domain.DEPRECATED .Service software update options for the domain.getTags()
Tag Manager which manages the tags for this resource.An arbitrary set of tags (key–value pairs) to associate with the OpenSearch Service domain.The virtual private cloud (VPC) configuration for the OpenSearch Service domain.void
inspect
(TreeInspector inspector) Examines the CloudFormation resource and discloses attributes.renderProperties
(Map<String, Object> props) void
setAccessPolicies
(Object value) An AWS Identity and Access Management ( IAM ) policy document that specifies who can access the OpenSearch Service domain and their permissions.void
setAdvancedOptions
(Map<String, String> value) Additional options to specify for the OpenSearch Service domain.void
setAdvancedOptions
(IResolvable value) Additional options to specify for the OpenSearch Service domain.void
Specifies options for fine-grained access control and SAML authentication.void
Specifies options for fine-grained access control and SAML authentication.void
setClusterConfig
(IResolvable value) Container for the cluster configuration of a domain.void
Container for the cluster configuration of a domain.void
setCognitoOptions
(IResolvable value) Configures OpenSearch Service to use Amazon Cognito authentication for OpenSearch Dashboards.void
Configures OpenSearch Service to use Amazon Cognito authentication for OpenSearch Dashboards.void
setDomainArn
(String value) void
Specifies additional options for the domain endpoint, such as whether to require HTTPS for all traffic or whether to use a custom endpoint rather than the default endpoint.void
Specifies additional options for the domain endpoint, such as whether to require HTTPS for all traffic or whether to use a custom endpoint rather than the default endpoint.void
setDomainName
(String value) A name for the OpenSearch Service domain.void
setEbsOptions
(IResolvable value) The configurations of Amazon Elastic Block Store (Amazon EBS) volumes that are attached to data nodes in the OpenSearch Service domain.void
The configurations of Amazon Elastic Block Store (Amazon EBS) volumes that are attached to data nodes in the OpenSearch Service domain.void
Whether the domain should encrypt data at rest, and if so, the AWS KMS key to use.void
Whether the domain should encrypt data at rest, and if so, the AWS KMS key to use.void
setEngineVersion
(String value) The version of OpenSearch to use.void
Container for IAM Identity Center Option control for the domain.void
Container for IAM Identity Center Option control for the domain.void
setIpAddressType
(String value) Choose either dual stack or IPv4 as your IP address type.void
setLogPublishingOptions
(Map<String, Object> value) An object with one or more of the following keys:SEARCH_SLOW_LOGS
,ES_APPLICATION_LOGS
,INDEX_SLOW_LOGS
,AUDIT_LOGS
, depending on the types of logs you want to publish.void
An object with one or more of the following keys:SEARCH_SLOW_LOGS
,ES_APPLICATION_LOGS
,INDEX_SLOW_LOGS
,AUDIT_LOGS
, depending on the types of logs you want to publish.void
Specifies whether node-to-node encryption is enabled.void
Specifies whether node-to-node encryption is enabled.void
Options for a domain's off-peak window, during which OpenSearch Service can perform mandatory configuration changes on the domain.void
Options for a domain's off-peak window, during which OpenSearch Service can perform mandatory configuration changes on the domain.void
setSkipShardMigrationWait
(Boolean value) void
void
setSnapshotOptions
(IResolvable value) DEPRECATED .void
DEPRECATED .void
Service software update options for the domain.void
Service software update options for the domain.void
setTagsRaw
(List<CfnTag> value) An arbitrary set of tags (key–value pairs) to associate with the OpenSearch Service domain.void
setVpcOptions
(IResolvable value) The virtual private cloud (VPC) configuration for the OpenSearch Service domain.void
The virtual private cloud (VPC) configuration for the OpenSearch Service domain.Methods inherited from class software.amazon.awscdk.CfnResource
addDeletionOverride, addDependency, addDependsOn, addMetadata, addOverride, addPropertyDeletionOverride, addPropertyOverride, applyRemovalPolicy, applyRemovalPolicy, applyRemovalPolicy, getAtt, getAtt, getCfnOptions, getCfnResourceType, getMetadata, getUpdatedProperites, getUpdatedProperties, isCfnResource, obtainDependencies, obtainResourceDependencies, removeDependency, replaceDependency, shouldSynthesize, toString, validateProperties
Methods inherited from class software.amazon.awscdk.CfnRefElement
getRef
Methods inherited from class software.amazon.awscdk.CfnElement
getCreationStack, getLogicalId, getStack, isCfnElement, overrideLogicalId
Methods inherited from class software.constructs.Construct
getNode, isConstruct
Methods inherited from class software.amazon.jsii.JsiiObject
jsiiAsyncCall, jsiiAsyncCall, jsiiCall, jsiiCall, jsiiGet, jsiiGet, jsiiSet, jsiiStaticCall, jsiiStaticCall, jsiiStaticGet, jsiiStaticGet, jsiiStaticSet, jsiiStaticSet
Methods inherited from class java.lang.Object
clone, equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, wait
Methods inherited from interface software.amazon.jsii.JsiiSerializable
$jsii$toJson
-
Field Details
-
CFN_RESOURCE_TYPE_NAME
The CloudFormation resource type name for this resource class.
-
-
Constructor Details
-
CfnDomain
protected CfnDomain(software.amazon.jsii.JsiiObjectRef objRef) -
CfnDomain
protected CfnDomain(software.amazon.jsii.JsiiObject.InitializationMode initializationMode) -
CfnDomain
@Stability(Stable) public CfnDomain(@NotNull software.constructs.Construct scope, @NotNull String id, @Nullable CfnDomainProps props) - Parameters:
scope
- Scope in which this resource is defined. This parameter is required.id
- Construct identifier for this resource (unique in its scope). This parameter is required.props
- Resource properties.
-
CfnDomain
@Stability(Stable) public CfnDomain(@NotNull software.constructs.Construct scope, @NotNull String id) - Parameters:
scope
- Scope in which this resource is defined. This parameter is required.id
- Construct identifier for this resource (unique in its scope). This parameter is required.
-
-
Method Details
-
inspect
Examines the CloudFormation resource and discloses attributes.- Specified by:
inspect
in interfaceIInspectable
- Parameters:
inspector
- tree inspector to collect and process attributes. This parameter is required.
-
renderProperties
@Stability(Stable) @NotNull protected Map<String,Object> renderProperties(@NotNull Map<String, Object> props) - Overrides:
renderProperties
in classCfnResource
- Parameters:
props
- This parameter is required.
-
getAttrAdvancedSecurityOptionsAnonymousAuthDisableDate
Date and time when the migration period will be disabled.Only necessary when enabling fine-grained access control on an existing domain .
-
getAttrArn
The Amazon Resource Name (ARN) of the CloudFormation stack. -
getAttrDomainEndpoint
The domain-specific endpoint used for requests to the OpenSearch APIs, such assearch-mystack-1ab2cdefghij-ab1c2deckoyb3hofw7wpqa3cm.us-west-1.es.amazonaws.com
. -
getAttrDomainEndpoints
-
getAttrDomainEndpointV2
IfIPAddressType
to set todualstack
, a version 2 domain endpoint is provisioned.This endpoint functions like a normal endpoint, except that it works with both IPv4 and IPv6 IP addresses. Normal endpoints work only with IPv4 IP addresses.
-
getAttrId
The resource ID.For example,
123456789012/my-domain
. -
getAttrIdentityCenterOptionsIdentityCenterApplicationArn
@Stability(Stable) @NotNull public String getAttrIdentityCenterOptionsIdentityCenterApplicationArn()The ARN for IAM Identity Center Application which will integrate with Amazon OpenSearch Service. -
getAttrIdentityCenterOptionsIdentityStoreId
The ID of IAM Identity Store. -
getAttrServiceSoftwareOptions
-
getAttrServiceSoftwareOptionsAutomatedUpdateDate
-
getAttrServiceSoftwareOptionsCancellable
-
getAttrServiceSoftwareOptionsCurrentVersion
-
getAttrServiceSoftwareOptionsDescription
-
getAttrServiceSoftwareOptionsNewVersion
-
getAttrServiceSoftwareOptionsOptionalDeployment
-
getAttrServiceSoftwareOptionsUpdateAvailable
-
getAttrServiceSoftwareOptionsUpdateStatus
-
getCfnProperties
- Overrides:
getCfnProperties
in classCfnResource
-
getTags
Tag Manager which manages the tags for this resource. -
getAccessPolicies
An AWS Identity and Access Management ( IAM ) policy document that specifies who can access the OpenSearch Service domain and their permissions. -
setAccessPolicies
An AWS Identity and Access Management ( IAM ) policy document that specifies who can access the OpenSearch Service domain and their permissions. -
getAdvancedOptions
Additional options to specify for the OpenSearch Service domain. -
setAdvancedOptions
Additional options to specify for the OpenSearch Service domain. -
setAdvancedOptions
Additional options to specify for the OpenSearch Service domain. -
getAdvancedSecurityOptions
Specifies options for fine-grained access control and SAML authentication. -
setAdvancedSecurityOptions
Specifies options for fine-grained access control and SAML authentication. -
setAdvancedSecurityOptions
@Stability(Stable) public void setAdvancedSecurityOptions(@Nullable CfnDomain.AdvancedSecurityOptionsInputProperty value) Specifies options for fine-grained access control and SAML authentication. -
getClusterConfig
Container for the cluster configuration of a domain. -
setClusterConfig
Container for the cluster configuration of a domain. -
setClusterConfig
Container for the cluster configuration of a domain. -
getCognitoOptions
Configures OpenSearch Service to use Amazon Cognito authentication for OpenSearch Dashboards. -
setCognitoOptions
Configures OpenSearch Service to use Amazon Cognito authentication for OpenSearch Dashboards. -
setCognitoOptions
Configures OpenSearch Service to use Amazon Cognito authentication for OpenSearch Dashboards. -
getDomainArn
-
setDomainArn
-
getDomainEndpointOptions
Specifies additional options for the domain endpoint, such as whether to require HTTPS for all traffic or whether to use a custom endpoint rather than the default endpoint. -
setDomainEndpointOptions
Specifies additional options for the domain endpoint, such as whether to require HTTPS for all traffic or whether to use a custom endpoint rather than the default endpoint. -
setDomainEndpointOptions
@Stability(Stable) public void setDomainEndpointOptions(@Nullable CfnDomain.DomainEndpointOptionsProperty value) Specifies additional options for the domain endpoint, such as whether to require HTTPS for all traffic or whether to use a custom endpoint rather than the default endpoint. -
getDomainName
A name for the OpenSearch Service domain. -
setDomainName
A name for the OpenSearch Service domain. -
getEbsOptions
The configurations of Amazon Elastic Block Store (Amazon EBS) volumes that are attached to data nodes in the OpenSearch Service domain. -
setEbsOptions
The configurations of Amazon Elastic Block Store (Amazon EBS) volumes that are attached to data nodes in the OpenSearch Service domain. -
setEbsOptions
The configurations of Amazon Elastic Block Store (Amazon EBS) volumes that are attached to data nodes in the OpenSearch Service domain. -
getEncryptionAtRestOptions
Whether the domain should encrypt data at rest, and if so, the AWS KMS key to use. -
setEncryptionAtRestOptions
Whether the domain should encrypt data at rest, and if so, the AWS KMS key to use. -
setEncryptionAtRestOptions
@Stability(Stable) public void setEncryptionAtRestOptions(@Nullable CfnDomain.EncryptionAtRestOptionsProperty value) Whether the domain should encrypt data at rest, and if so, the AWS KMS key to use. -
getEngineVersion
The version of OpenSearch to use. -
setEngineVersion
The version of OpenSearch to use. -
getIdentityCenterOptions
Container for IAM Identity Center Option control for the domain. -
setIdentityCenterOptions
Container for IAM Identity Center Option control for the domain. -
setIdentityCenterOptions
@Stability(Stable) public void setIdentityCenterOptions(@Nullable CfnDomain.IdentityCenterOptionsProperty value) Container for IAM Identity Center Option control for the domain. -
getIpAddressType
Choose either dual stack or IPv4 as your IP address type. -
setIpAddressType
Choose either dual stack or IPv4 as your IP address type. -
getLogPublishingOptions
An object with one or more of the following keys:SEARCH_SLOW_LOGS
,ES_APPLICATION_LOGS
,INDEX_SLOW_LOGS
,AUDIT_LOGS
, depending on the types of logs you want to publish. -
setLogPublishingOptions
An object with one or more of the following keys:SEARCH_SLOW_LOGS
,ES_APPLICATION_LOGS
,INDEX_SLOW_LOGS
,AUDIT_LOGS
, depending on the types of logs you want to publish. -
setLogPublishingOptions
An object with one or more of the following keys:SEARCH_SLOW_LOGS
,ES_APPLICATION_LOGS
,INDEX_SLOW_LOGS
,AUDIT_LOGS
, depending on the types of logs you want to publish. -
getNodeToNodeEncryptionOptions
Specifies whether node-to-node encryption is enabled. -
setNodeToNodeEncryptionOptions
Specifies whether node-to-node encryption is enabled. -
setNodeToNodeEncryptionOptions
@Stability(Stable) public void setNodeToNodeEncryptionOptions(@Nullable CfnDomain.NodeToNodeEncryptionOptionsProperty value) Specifies whether node-to-node encryption is enabled. -
getOffPeakWindowOptions
Options for a domain's off-peak window, during which OpenSearch Service can perform mandatory configuration changes on the domain. -
setOffPeakWindowOptions
Options for a domain's off-peak window, during which OpenSearch Service can perform mandatory configuration changes on the domain. -
setOffPeakWindowOptions
@Stability(Stable) public void setOffPeakWindowOptions(@Nullable CfnDomain.OffPeakWindowOptionsProperty value) Options for a domain's off-peak window, during which OpenSearch Service can perform mandatory configuration changes on the domain. -
getSkipShardMigrationWait
-
setSkipShardMigrationWait
-
setSkipShardMigrationWait
-
getSnapshotOptions
DEPRECATED . -
setSnapshotOptions
DEPRECATED . -
setSnapshotOptions
@Stability(Stable) public void setSnapshotOptions(@Nullable CfnDomain.SnapshotOptionsProperty value) DEPRECATED . -
getSoftwareUpdateOptions
Service software update options for the domain. -
setSoftwareUpdateOptions
Service software update options for the domain. -
setSoftwareUpdateOptions
@Stability(Stable) public void setSoftwareUpdateOptions(@Nullable CfnDomain.SoftwareUpdateOptionsProperty value) Service software update options for the domain. -
getTagsRaw
An arbitrary set of tags (key–value pairs) to associate with the OpenSearch Service domain. -
setTagsRaw
An arbitrary set of tags (key–value pairs) to associate with the OpenSearch Service domain. -
getVpcOptions
The virtual private cloud (VPC) configuration for the OpenSearch Service domain. -
setVpcOptions
The virtual private cloud (VPC) configuration for the OpenSearch Service domain. -
setVpcOptions
The virtual private cloud (VPC) configuration for the OpenSearch Service domain.
-