@aws-solutions-constructs/aws-lambda-opensearch 2.51.0 → 2.52.1

package/test/integ.lamopn-existing-vpc.expected.json

@@ -1,1602 +0,0 @@
-{
-  "Resources": {
-    "Vpc8378EB38": {
-      "Type": "AWS::EC2::VPC",
-      "Properties": {
-        "CidrBlock": "172.168.0.0/16",
-        "EnableDnsHostnames": true,
-        "EnableDnsSupport": true,
-        "InstanceTenancy": "default",
-        "Tags": [
-          {
-            "Key": "Name",
-            "Value": "lamopn-existing-vpc/Vpc"
-          }
-        ]
-      }
-    },
-    "VpcPublicSubnet1Subnet5C2D37C4": {
-      "Type": "AWS::EC2::Subnet",
-      "Properties": {
-        "AvailabilityZone": "test-region-1a",
-        "CidrBlock": "172.168.0.0/19",
-        "MapPublicIpOnLaunch": true,
-        "Tags": [
-          {
-            "Key": "aws-cdk:subnet-name",
-            "Value": "Public"
-          },
-          {
-            "Key": "aws-cdk:subnet-type",
-            "Value": "Public"
-          },
-          {
-            "Key": "Name",
-            "Value": "lamopn-existing-vpc/Vpc/PublicSubnet1"
-          }
-        ],
-        "VpcId": {
-          "Ref": "Vpc8378EB38"
-        }
-      },
-      "Metadata": {
-        "cfn_nag": {
-          "rules_to_suppress": [
-            {
-              "id": "W33",
-              "reason": "Allow Public Subnets to have MapPublicIpOnLaunch set to true"
-            }
-          ]
-        }
-      }
-    },
-    "VpcPublicSubnet1RouteTable6C95E38E": {
-      "Type": "AWS::EC2::RouteTable",
-      "Properties": {
-        "Tags": [
-          {
-            "Key": "Name",
-            "Value": "lamopn-existing-vpc/Vpc/PublicSubnet1"
-          }
-        ],
-        "VpcId": {
-          "Ref": "Vpc8378EB38"
-        }
-      }
-    },
-    "VpcPublicSubnet1RouteTableAssociation97140677": {
-      "Type": "AWS::EC2::SubnetRouteTableAssociation",
-      "Properties": {
-        "RouteTableId": {
-          "Ref": "VpcPublicSubnet1RouteTable6C95E38E"
-        },
-        "SubnetId": {
-          "Ref": "VpcPublicSubnet1Subnet5C2D37C4"
-        }
-      }
-    },
-    "VpcPublicSubnet1DefaultRoute3DA9E72A": {
-      "Type": "AWS::EC2::Route",
-      "Properties": {
-        "DestinationCidrBlock": "0.0.0.0/0",
-        "GatewayId": {
-          "Ref": "VpcIGWD7BA715C"
-        },
-        "RouteTableId": {
-          "Ref": "VpcPublicSubnet1RouteTable6C95E38E"
-        }
-      },
-      "DependsOn": [
-        "VpcVPCGWBF912B6E"
-      ]
-    },
-    "VpcPublicSubnet1EIPD7E02669": {
-      "Type": "AWS::EC2::EIP",
-      "Properties": {
-        "Domain": "vpc",
-        "Tags": [
-          {
-            "Key": "Name",
-            "Value": "lamopn-existing-vpc/Vpc/PublicSubnet1"
-          }
-        ]
-      }
-    },
-    "VpcPublicSubnet1NATGateway4D7517AA": {
-      "Type": "AWS::EC2::NatGateway",
-      "Properties": {
-        "AllocationId": {
-          "Fn::GetAtt": [
-            "VpcPublicSubnet1EIPD7E02669",
-            "AllocationId"
-          ]
-        },
-        "SubnetId": {
-          "Ref": "VpcPublicSubnet1Subnet5C2D37C4"
-        },
-        "Tags": [
-          {
-            "Key": "Name",
-            "Value": "lamopn-existing-vpc/Vpc/PublicSubnet1"
-          }
-        ]
-      },
-      "DependsOn": [
-        "VpcPublicSubnet1DefaultRoute3DA9E72A",
-        "VpcPublicSubnet1RouteTableAssociation97140677"
-      ]
-    },
-    "VpcPublicSubnet2Subnet691E08A3": {
-      "Type": "AWS::EC2::Subnet",
-      "Properties": {
-        "AvailabilityZone": "test-region-1b",
-        "CidrBlock": "172.168.32.0/19",
-        "MapPublicIpOnLaunch": true,
-        "Tags": [
-          {
-            "Key": "aws-cdk:subnet-name",
-            "Value": "Public"
-          },
-          {
-            "Key": "aws-cdk:subnet-type",
-            "Value": "Public"
-          },
-          {
-            "Key": "Name",
-            "Value": "lamopn-existing-vpc/Vpc/PublicSubnet2"
-          }
-        ],
-        "VpcId": {
-          "Ref": "Vpc8378EB38"
-        }
-      },
-      "Metadata": {
-        "cfn_nag": {
-          "rules_to_suppress": [
-            {
-              "id": "W33",
-              "reason": "Allow Public Subnets to have MapPublicIpOnLaunch set to true"
-            }
-          ]
-        }
-      }
-    },
-    "VpcPublicSubnet2RouteTable94F7E489": {
-      "Type": "AWS::EC2::RouteTable",
-      "Properties": {
-        "Tags": [
-          {
-            "Key": "Name",
-            "Value": "lamopn-existing-vpc/Vpc/PublicSubnet2"
-          }
-        ],
-        "VpcId": {
-          "Ref": "Vpc8378EB38"
-        }
-      }
-    },
-    "VpcPublicSubnet2RouteTableAssociationDD5762D8": {
-      "Type": "AWS::EC2::SubnetRouteTableAssociation",
-      "Properties": {
-        "RouteTableId": {
-          "Ref": "VpcPublicSubnet2RouteTable94F7E489"
-        },
-        "SubnetId": {
-          "Ref": "VpcPublicSubnet2Subnet691E08A3"
-        }
-      }
-    },
-    "VpcPublicSubnet2DefaultRoute97F91067": {
-      "Type": "AWS::EC2::Route",
-      "Properties": {
-        "DestinationCidrBlock": "0.0.0.0/0",
-        "GatewayId": {
-          "Ref": "VpcIGWD7BA715C"
-        },
-        "RouteTableId": {
-          "Ref": "VpcPublicSubnet2RouteTable94F7E489"
-        }
-      },
-      "DependsOn": [
-        "VpcVPCGWBF912B6E"
-      ]
-    },
-    "VpcPublicSubnet2EIP3C605A87": {
-      "Type": "AWS::EC2::EIP",
-      "Properties": {
-        "Domain": "vpc",
-        "Tags": [
-          {
-            "Key": "Name",
-            "Value": "lamopn-existing-vpc/Vpc/PublicSubnet2"
-          }
-        ]
-      }
-    },
-    "VpcPublicSubnet2NATGateway9182C01D": {
-      "Type": "AWS::EC2::NatGateway",
-      "Properties": {
-        "AllocationId": {
-          "Fn::GetAtt": [
-            "VpcPublicSubnet2EIP3C605A87",
-            "AllocationId"
-          ]
-        },
-        "SubnetId": {
-          "Ref": "VpcPublicSubnet2Subnet691E08A3"
-        },
-        "Tags": [
-          {
-            "Key": "Name",
-            "Value": "lamopn-existing-vpc/Vpc/PublicSubnet2"
-          }
-        ]
-      },
-      "DependsOn": [
-        "VpcPublicSubnet2DefaultRoute97F91067",
-        "VpcPublicSubnet2RouteTableAssociationDD5762D8"
-      ]
-    },
-    "VpcPublicSubnet3SubnetBE12F0B6": {
-      "Type": "AWS::EC2::Subnet",
-      "Properties": {
-        "AvailabilityZone": "test-region-1c",
-        "CidrBlock": "172.168.64.0/19",
-        "MapPublicIpOnLaunch": true,
-        "Tags": [
-          {
-            "Key": "aws-cdk:subnet-name",
-            "Value": "Public"
-          },
-          {
-            "Key": "aws-cdk:subnet-type",
-            "Value": "Public"
-          },
-          {
-            "Key": "Name",
-            "Value": "lamopn-existing-vpc/Vpc/PublicSubnet3"
-          }
-        ],
-        "VpcId": {
-          "Ref": "Vpc8378EB38"
-        }
-      },
-      "Metadata": {
-        "cfn_nag": {
-          "rules_to_suppress": [
-            {
-              "id": "W33",
-              "reason": "Allow Public Subnets to have MapPublicIpOnLaunch set to true"
-            }
-          ]
-        }
-      }
-    },
-    "VpcPublicSubnet3RouteTable93458DBB": {
-      "Type": "AWS::EC2::RouteTable",
-      "Properties": {
-        "Tags": [
-          {
-            "Key": "Name",
-            "Value": "lamopn-existing-vpc/Vpc/PublicSubnet3"
-          }
-        ],
-        "VpcId": {
-          "Ref": "Vpc8378EB38"
-        }
-      }
-    },
-    "VpcPublicSubnet3RouteTableAssociation1F1EDF02": {
-      "Type": "AWS::EC2::SubnetRouteTableAssociation",
-      "Properties": {
-        "RouteTableId": {
-          "Ref": "VpcPublicSubnet3RouteTable93458DBB"
-        },
-        "SubnetId": {
-          "Ref": "VpcPublicSubnet3SubnetBE12F0B6"
-        }
-      }
-    },
-    "VpcPublicSubnet3DefaultRoute4697774F": {
-      "Type": "AWS::EC2::Route",
-      "Properties": {
-        "DestinationCidrBlock": "0.0.0.0/0",
-        "GatewayId": {
-          "Ref": "VpcIGWD7BA715C"
-        },
-        "RouteTableId": {
-          "Ref": "VpcPublicSubnet3RouteTable93458DBB"
-        }
-      },
-      "DependsOn": [
-        "VpcVPCGWBF912B6E"
-      ]
-    },
-    "VpcPublicSubnet3EIP3A666A23": {
-      "Type": "AWS::EC2::EIP",
-      "Properties": {
-        "Domain": "vpc",
-        "Tags": [
-          {
-            "Key": "Name",
-            "Value": "lamopn-existing-vpc/Vpc/PublicSubnet3"
-          }
-        ]
-      }
-    },
-    "VpcPublicSubnet3NATGateway7640CD1D": {
-      "Type": "AWS::EC2::NatGateway",
-      "Properties": {
-        "AllocationId": {
-          "Fn::GetAtt": [
-            "VpcPublicSubnet3EIP3A666A23",
-            "AllocationId"
-          ]
-        },
-        "SubnetId": {
-          "Ref": "VpcPublicSubnet3SubnetBE12F0B6"
-        },
-        "Tags": [
-          {
-            "Key": "Name",
-            "Value": "lamopn-existing-vpc/Vpc/PublicSubnet3"
-          }
-        ]
-      },
-      "DependsOn": [
-        "VpcPublicSubnet3DefaultRoute4697774F",
-        "VpcPublicSubnet3RouteTableAssociation1F1EDF02"
-      ]
-    },
-    "VpcPrivateSubnet1Subnet536B997A": {
-      "Type": "AWS::EC2::Subnet",
-      "Properties": {
-        "AvailabilityZone": "test-region-1a",
-        "CidrBlock": "172.168.96.0/19",
-        "MapPublicIpOnLaunch": false,
-        "Tags": [
-          {
-            "Key": "aws-cdk:subnet-name",
-            "Value": "Private"
-          },
-          {
-            "Key": "aws-cdk:subnet-type",
-            "Value": "Private"
-          },
-          {
-            "Key": "Name",
-            "Value": "lamopn-existing-vpc/Vpc/PrivateSubnet1"
-          }
-        ],
-        "VpcId": {
-          "Ref": "Vpc8378EB38"
-        }
-      }
-    },
-    "VpcPrivateSubnet1RouteTableB2C5B500": {
-      "Type": "AWS::EC2::RouteTable",
-      "Properties": {
-        "Tags": [
-          {
-            "Key": "Name",
-            "Value": "lamopn-existing-vpc/Vpc/PrivateSubnet1"
-          }
-        ],
-        "VpcId": {
-          "Ref": "Vpc8378EB38"
-        }
-      }
-    },
-    "VpcPrivateSubnet1RouteTableAssociation70C59FA6": {
-      "Type": "AWS::EC2::SubnetRouteTableAssociation",
-      "Properties": {
-        "RouteTableId": {
-          "Ref": "VpcPrivateSubnet1RouteTableB2C5B500"
-        },
-        "SubnetId": {
-          "Ref": "VpcPrivateSubnet1Subnet536B997A"
-        }
-      }
-    },
-    "VpcPrivateSubnet1DefaultRouteBE02A9ED": {
-      "Type": "AWS::EC2::Route",
-      "Properties": {
-        "DestinationCidrBlock": "0.0.0.0/0",
-        "NatGatewayId": {
-          "Ref": "VpcPublicSubnet1NATGateway4D7517AA"
-        },
-        "RouteTableId": {
-          "Ref": "VpcPrivateSubnet1RouteTableB2C5B500"
-        }
-      }
-    },
-    "VpcPrivateSubnet2Subnet3788AAA1": {
-      "Type": "AWS::EC2::Subnet",
-      "Properties": {
-        "AvailabilityZone": "test-region-1b",
-        "CidrBlock": "172.168.128.0/19",
-        "MapPublicIpOnLaunch": false,
-        "Tags": [
-          {
-            "Key": "aws-cdk:subnet-name",
-            "Value": "Private"
-          },
-          {
-            "Key": "aws-cdk:subnet-type",
-            "Value": "Private"
-          },
-          {
-            "Key": "Name",
-            "Value": "lamopn-existing-vpc/Vpc/PrivateSubnet2"
-          }
-        ],
-        "VpcId": {
-          "Ref": "Vpc8378EB38"
-        }
-      }
-    },
-    "VpcPrivateSubnet2RouteTableA678073B": {
-      "Type": "AWS::EC2::RouteTable",
-      "Properties": {
-        "Tags": [
-          {
-            "Key": "Name",
-            "Value": "lamopn-existing-vpc/Vpc/PrivateSubnet2"
-          }
-        ],
-        "VpcId": {
-          "Ref": "Vpc8378EB38"
-        }
-      }
-    },
-    "VpcPrivateSubnet2RouteTableAssociationA89CAD56": {
-      "Type": "AWS::EC2::SubnetRouteTableAssociation",
-      "Properties": {
-        "RouteTableId": {
-          "Ref": "VpcPrivateSubnet2RouteTableA678073B"
-        },
-        "SubnetId": {
-          "Ref": "VpcPrivateSubnet2Subnet3788AAA1"
-        }
-      }
-    },
-    "VpcPrivateSubnet2DefaultRoute060D2087": {
-      "Type": "AWS::EC2::Route",
-      "Properties": {
-        "DestinationCidrBlock": "0.0.0.0/0",
-        "NatGatewayId": {
-          "Ref": "VpcPublicSubnet2NATGateway9182C01D"
-        },
-        "RouteTableId": {
-          "Ref": "VpcPrivateSubnet2RouteTableA678073B"
-        }
-      }
-    },
-    "VpcPrivateSubnet3SubnetF258B56E": {
-      "Type": "AWS::EC2::Subnet",
-      "Properties": {
-        "AvailabilityZone": "test-region-1c",
-        "CidrBlock": "172.168.160.0/19",
-        "MapPublicIpOnLaunch": false,
-        "Tags": [
-          {
-            "Key": "aws-cdk:subnet-name",
-            "Value": "Private"
-          },
-          {
-            "Key": "aws-cdk:subnet-type",
-            "Value": "Private"
-          },
-          {
-            "Key": "Name",
-            "Value": "lamopn-existing-vpc/Vpc/PrivateSubnet3"
-          }
-        ],
-        "VpcId": {
-          "Ref": "Vpc8378EB38"
-        }
-      }
-    },
-    "VpcPrivateSubnet3RouteTableD98824C7": {
-      "Type": "AWS::EC2::RouteTable",
-      "Properties": {
-        "Tags": [
-          {
-            "Key": "Name",
-            "Value": "lamopn-existing-vpc/Vpc/PrivateSubnet3"
-          }
-        ],
-        "VpcId": {
-          "Ref": "Vpc8378EB38"
-        }
-      }
-    },
-    "VpcPrivateSubnet3RouteTableAssociation16BDDC43": {
-      "Type": "AWS::EC2::SubnetRouteTableAssociation",
-      "Properties": {
-        "RouteTableId": {
-          "Ref": "VpcPrivateSubnet3RouteTableD98824C7"
-        },
-        "SubnetId": {
-          "Ref": "VpcPrivateSubnet3SubnetF258B56E"
-        }
-      }
-    },
-    "VpcPrivateSubnet3DefaultRoute94B74F0D": {
-      "Type": "AWS::EC2::Route",
-      "Properties": {
-        "DestinationCidrBlock": "0.0.0.0/0",
-        "NatGatewayId": {
-          "Ref": "VpcPublicSubnet3NATGateway7640CD1D"
-        },
-        "RouteTableId": {
-          "Ref": "VpcPrivateSubnet3RouteTableD98824C7"
-        }
-      }
-    },
-    "VpcIGWD7BA715C": {
-      "Type": "AWS::EC2::InternetGateway",
-      "Properties": {
-        "Tags": [
-          {
-            "Key": "Name",
-            "Value": "lamopn-existing-vpc/Vpc"
-          }
-        ]
-      }
-    },
-    "VpcVPCGWBF912B6E": {
-      "Type": "AWS::EC2::VPCGatewayAttachment",
-      "Properties": {
-        "InternetGatewayId": {
-          "Ref": "VpcIGWD7BA715C"
-        },
-        "VpcId": {
-          "Ref": "Vpc8378EB38"
-        }
-      }
-    },
-    "VpcFlowLogIAMRole6A475D41": {
-      "Type": "AWS::IAM::Role",
-      "Properties": {
-        "AssumeRolePolicyDocument": {
-          "Statement": [
-            {
-              "Action": "sts:AssumeRole",
-              "Effect": "Allow",
-              "Principal": {
-                "Service": "vpc-flow-logs.amazonaws.com"
-              }
-            }
-          ],
-          "Version": "2012-10-17"
-        },
-        "Tags": [
-          {
-            "Key": "Name",
-            "Value": "lamopn-existing-vpc/Vpc/FlowLog"
-          }
-        ]
-      }
-    },
-    "VpcFlowLogIAMRoleDefaultPolicy406FB995": {
-      "Type": "AWS::IAM::Policy",
-      "Properties": {
-        "PolicyDocument": {
-          "Statement": [
-            {
-              "Action": [
-                "logs:CreateLogStream",
-                "logs:PutLogEvents",
-                "logs:DescribeLogStreams"
-              ],
-              "Effect": "Allow",
-              "Resource": {
-                "Fn::GetAtt": [
-                  "VpcFlowLogLogGroup7B5C56B9",
-                  "Arn"
-                ]
-              }
-            },
-            {
-              "Action": "iam:PassRole",
-              "Effect": "Allow",
-              "Resource": {
-                "Fn::GetAtt": [
-                  "VpcFlowLogIAMRole6A475D41",
-                  "Arn"
-                ]
-              }
-            }
-          ],
-          "Version": "2012-10-17"
-        },
-        "PolicyName": "VpcFlowLogIAMRoleDefaultPolicy406FB995",
-        "Roles": [
-          {
-            "Ref": "VpcFlowLogIAMRole6A475D41"
-          }
-        ]
-      }
-    },
-    "VpcFlowLogLogGroup7B5C56B9": {
-      "Type": "AWS::Logs::LogGroup",
-      "Properties": {
-        "RetentionInDays": 731,
-        "Tags": [
-          {
-            "Key": "Name",
-            "Value": "lamopn-existing-vpc/Vpc/FlowLog"
-          }
-        ]
-      },
-      "UpdateReplacePolicy": "Retain",
-      "DeletionPolicy": "Retain",
-      "Metadata": {
-        "cfn_nag": {
-          "rules_to_suppress": [
-            {
-              "id": "W84",
-              "reason": "By default CloudWatchLogs LogGroups data is encrypted using the CloudWatch server-side encryption keys (AWS Managed Keys)"
-            }
-          ]
-        }
-      }
-    },
-    "VpcFlowLog8FF33A73": {
-      "Type": "AWS::EC2::FlowLog",
-      "Properties": {
-        "DeliverLogsPermissionArn": {
-          "Fn::GetAtt": [
-            "VpcFlowLogIAMRole6A475D41",
-            "Arn"
-          ]
-        },
-        "LogDestinationType": "cloud-watch-logs",
-        "LogGroupName": {
-          "Ref": "VpcFlowLogLogGroup7B5C56B9"
-        },
-        "ResourceId": {
-          "Ref": "Vpc8378EB38"
-        },
-        "ResourceType": "VPC",
-        "Tags": [
-          {
-            "Key": "Name",
-            "Value": "lamopn-existing-vpc/Vpc/FlowLog"
-          }
-        ],
-        "TrafficType": "ALL"
-      }
-    },
-    "testlambdaelasticsearchkibana4LambdaFunctionServiceRoleA52BB7F9": {
-      "Type": "AWS::IAM::Role",
-      "Properties": {
-        "AssumeRolePolicyDocument": {
-          "Statement": [
-            {
-              "Action": "sts:AssumeRole",
-              "Effect": "Allow",
-              "Principal": {
-                "Service": "lambda.amazonaws.com"
-              }
-            }
-          ],
-          "Version": "2012-10-17"
-        },
-        "Policies": [
-          {
-            "PolicyDocument": {
-              "Statement": [
-                {
-                  "Action": [
-                    "logs:CreateLogGroup",
-                    "logs:CreateLogStream",
-                    "logs:PutLogEvents"
-                  ],
-                  "Effect": "Allow",
-                  "Resource": {
-                    "Fn::Join": [
-                      "",
-                      [
-                        "arn:",
-                        {
-                          "Ref": "AWS::Partition"
-                        },
-                        ":logs:",
-                        {
-                          "Ref": "AWS::Region"
-                        },
-                        ":",
-                        {
-                          "Ref": "AWS::AccountId"
-                        },
-                        ":log-group:/aws/lambda/*"
-                      ]
-                    ]
-                  }
-                }
-              ],
-              "Version": "2012-10-17"
-            },
-            "PolicyName": "LambdaFunctionServiceRolePolicy"
-          }
-        ]
-      }
-    },
-    "testlambdaelasticsearchkibana4LambdaFunctionServiceRoleDefaultPolicyA5AD88E5": {
-      "Type": "AWS::IAM::Policy",
-      "Properties": {
-        "PolicyDocument": {
-          "Statement": [
-            {
-              "Action": [
-                "ec2:CreateNetworkInterface",
-                "ec2:DescribeNetworkInterfaces",
-                "ec2:DeleteNetworkInterface",
-                "ec2:AssignPrivateIpAddresses",
-                "ec2:UnassignPrivateIpAddresses"
-              ],
-              "Effect": "Allow",
-              "Resource": "*"
-            },
-            {
-              "Action": [
-                "xray:PutTraceSegments",
-                "xray:PutTelemetryRecords"
-              ],
-              "Effect": "Allow",
-              "Resource": "*"
-            }
-          ],
-          "Version": "2012-10-17"
-        },
-        "PolicyName": "testlambdaelasticsearchkibana4LambdaFunctionServiceRoleDefaultPolicyA5AD88E5",
-        "Roles": [
-          {
-            "Ref": "testlambdaelasticsearchkibana4LambdaFunctionServiceRoleA52BB7F9"
-          }
-        ]
-      },
-      "Metadata": {
-        "cfn_nag": {
-          "rules_to_suppress": [
-            {
-              "id": "W12",
-              "reason": "Lambda needs the following minimum required permissions to send trace data to X-Ray and access ENIs in a VPC."
-            }
-          ]
-        }
-      }
-    },
-    "testlambdaelasticsearchkibana4ReplaceDefaultSecurityGroupsecuritygroupA79E2B92": {
-      "Type": "AWS::EC2::SecurityGroup",
-      "Properties": {
-        "GroupDescription": "lamopn-existing-vpc/test-lambda-elasticsearch-kibana4/ReplaceDefaultSecurityGroup-security-group",
-        "SecurityGroupEgress": [
-          {
-            "CidrIp": "0.0.0.0/0",
-            "Description": "Allow all outbound traffic by default",
-            "IpProtocol": "-1"
-          }
-        ],
-        "VpcId": {
-          "Ref": "Vpc8378EB38"
-        }
-      },
-      "Metadata": {
-        "cfn_nag": {
-          "rules_to_suppress": [
-            {
-              "id": "W5",
-              "reason": "Egress of 0.0.0.0/0 is default and generally considered OK"
-            },
-            {
-              "id": "W40",
-              "reason": "Egress IPProtocol of -1 is default and generally considered OK"
-            }
-          ]
-        }
-      }
-    },
-    "testlambdaelasticsearchkibana4LambdaFunction2C5856DF": {
-      "Type": "AWS::Lambda::Function",
-      "Properties": {
-        "Code": {
-          "S3Bucket": "cdk-hnb659fds-assets-12345678-test-region",
-          "S3Key": "abbc4eca9e7ddabc31da3ce83159e6eee8e72e2c358ab8af0711044514c41290.zip"
-        },
-        "Environment": {
-          "Variables": {
-            "AWS_NODEJS_CONNECTION_REUSE_ENABLED": "1",
-            "DOMAIN_ENDPOINT": {
-              "Fn::GetAtt": [
-                "testlambdaelasticsearchkibana4OpenSearchDomain94EAD3A3",
-                "DomainEndpoint"
-              ]
-            }
-          }
-        },
-        "Handler": "index.handler",
-        "Role": {
-          "Fn::GetAtt": [
-            "testlambdaelasticsearchkibana4LambdaFunctionServiceRoleA52BB7F9",
-            "Arn"
-          ]
-        },
-        "Runtime": "nodejs16.x",
-        "TracingConfig": {
-          "Mode": "Active"
-        },
-        "VpcConfig": {
-          "SecurityGroupIds": [
-            {
-              "Fn::GetAtt": [
-                "testlambdaelasticsearchkibana4ReplaceDefaultSecurityGroupsecuritygroupA79E2B92",
-                "GroupId"
-              ]
-            }
-          ],
-          "SubnetIds": [
-            {
-              "Ref": "VpcPrivateSubnet1Subnet536B997A"
-            },
-            {
-              "Ref": "VpcPrivateSubnet2Subnet3788AAA1"
-            },
-            {
-              "Ref": "VpcPrivateSubnet3SubnetF258B56E"
-            }
-          ]
-        }
-      },
-      "DependsOn": [
-        "testlambdaelasticsearchkibana4LambdaFunctionServiceRoleDefaultPolicyA5AD88E5",
-        "testlambdaelasticsearchkibana4LambdaFunctionServiceRoleA52BB7F9",
-        "VpcPrivateSubnet1DefaultRouteBE02A9ED",
-        "VpcPrivateSubnet1RouteTableAssociation70C59FA6",
-        "VpcPrivateSubnet2DefaultRoute060D2087",
-        "VpcPrivateSubnet2RouteTableAssociationA89CAD56",
-        "VpcPrivateSubnet3DefaultRoute94B74F0D",
-        "VpcPrivateSubnet3RouteTableAssociation16BDDC43"
-      ],
-      "Metadata": {
-        "cfn_nag": {
-          "rules_to_suppress": [
-            {
-              "id": "W58",
-              "reason": "Lambda functions has the required permission to write CloudWatch Logs. It uses custom policy instead of arn:aws:iam::aws:policy/service-role/AWSLambdaBasicExecutionRole with tighter permissions."
-            },
-            {
-              "id": "W89",
-              "reason": "This is not a rule for the general case, just for specific use cases/industries"
-            },
-            {
-              "id": "W92",
-              "reason": "Impossible for us to define the correct concurrency for clients"
-            }
-          ]
-        }
-      }
-    },
-    "testlambdaelasticsearchkibana4CognitoUserPool37A5CDE1": {
-      "Type": "AWS::Cognito::UserPool",
-      "Properties": {
-        "AccountRecoverySetting": {
-          "RecoveryMechanisms": [
-            {
-              "Name": "verified_phone_number",
-              "Priority": 1
-            },
-            {
-              "Name": "verified_email",
-              "Priority": 2
-            }
-          ]
-        },
-        "AdminCreateUserConfig": {
-          "AllowAdminCreateUserOnly": true
-        },
-        "EmailVerificationMessage": "The verification code to your new account is {####}",
-        "EmailVerificationSubject": "Verify your new account",
-        "SmsVerificationMessage": "The verification code to your new account is {####}",
-        "UserPoolAddOns": {
-          "AdvancedSecurityMode": "ENFORCED"
-        },
-        "VerificationMessageTemplate": {
-          "DefaultEmailOption": "CONFIRM_WITH_CODE",
-          "EmailMessage": "The verification code to your new account is {####}",
-          "EmailSubject": "Verify your new account",
-          "SmsMessage": "The verification code to your new account is {####}"
-        }
-      },
-      "UpdateReplacePolicy": "Retain",
-      "DeletionPolicy": "Retain"
-    },
-    "testlambdaelasticsearchkibana4CognitoUserPoolClientABBF34C4": {
-      "Type": "AWS::Cognito::UserPoolClient",
-      "Properties": {
-        "AllowedOAuthFlows": [
-          "implicit",
-          "code"
-        ],
-        "AllowedOAuthFlowsUserPoolClient": true,
-        "AllowedOAuthScopes": [
-          "profile",
-          "phone",
-          "email",
-          "openid",
-          "aws.cognito.signin.user.admin"
-        ],
-        "CallbackURLs": [
-          "https://example.com"
-        ],
-        "SupportedIdentityProviders": [
-          "COGNITO"
-        ],
-        "UserPoolId": {
-          "Ref": "testlambdaelasticsearchkibana4CognitoUserPool37A5CDE1"
-        }
-      }
-    },
-    "testlambdaelasticsearchkibana4CognitoIdentityPool76EE9793": {
-      "Type": "AWS::Cognito::IdentityPool",
-      "Properties": {
-        "AllowUnauthenticatedIdentities": false,
-        "CognitoIdentityProviders": [
-          {
-            "ClientId": {
-              "Ref": "testlambdaelasticsearchkibana4CognitoUserPoolClientABBF34C4"
-            },
-            "ProviderName": {
-              "Fn::GetAtt": [
-                "testlambdaelasticsearchkibana4CognitoUserPool37A5CDE1",
-                "ProviderName"
-              ]
-            },
-            "ServerSideTokenCheck": true
-          }
-        ]
-      }
-    },
-    "testlambdaelasticsearchkibana4UserPoolDomain4CAAF2F6": {
-      "Type": "AWS::Cognito::UserPoolDomain",
-      "Properties": {
-        "Domain": {
-          "Fn::Join": [
-            "-",
-            [
-              "dmn",
-              {
-                "Fn::Select": [
-                  4,
-                  {
-                    "Fn::Split": [
-                      "-",
-                      {
-                        "Fn::Select": [
-                          2,
-                          {
-                            "Fn::Split": [
-                              "/",
-                              {
-                                "Ref": "AWS::StackId"
-                              }
-                            ]
-                          }
-                        ]
-                      }
-                    ]
-                  }
-                ]
-              }
-            ]
-          ]
-        },
-        "UserPoolId": {
-          "Ref": "testlambdaelasticsearchkibana4CognitoUserPool37A5CDE1"
-        }
-      },
-      "DependsOn": [
-        "testlambdaelasticsearchkibana4CognitoUserPool37A5CDE1"
-      ]
-    },
-    "testlambdaelasticsearchkibana4CognitoAuthorizedRoleA7D6B392": {
-      "Type": "AWS::IAM::Role",
-      "Properties": {
-        "AssumeRolePolicyDocument": {
-          "Statement": [
-            {
-              "Action": "sts:AssumeRoleWithWebIdentity",
-              "Condition": {
-                "StringEquals": {
-                  "cognito-identity.amazonaws.com:aud": {
-                    "Ref": "testlambdaelasticsearchkibana4CognitoIdentityPool76EE9793"
-                  }
-                },
-                "ForAnyValue:StringLike": {
-                  "cognito-identity.amazonaws.com:amr": "authenticated"
-                }
-              },
-              "Effect": "Allow",
-              "Principal": {
-                "Federated": "cognito-identity.amazonaws.com"
-              }
-            }
-          ],
-          "Version": "2012-10-17"
-        },
-        "Policies": [
-          {
-            "PolicyDocument": {
-              "Statement": [
-                {
-                  "Action": "es:ESHttp*",
-                  "Effect": "Allow",
-                  "Resource": {
-                    "Fn::Join": [
-                      "",
-                      [
-                        "arn:",
-                        {
-                          "Ref": "AWS::Partition"
-                        },
-                        ":es:",
-                        {
-                          "Ref": "AWS::Region"
-                        },
-                        ":",
-                        {
-                          "Ref": "AWS::AccountId"
-                        },
-                        ":domain/",
-                        {
-                          "Fn::Join": [
-                            "-",
-                            [
-                              "dmn",
-                              {
-                                "Fn::Select": [
-                                  4,
-                                  {
-                                    "Fn::Split": [
-                                      "-",
-                                      {
-                                        "Fn::Select": [
-                                          2,
-                                          {
-                                            "Fn::Split": [
-                                              "/",
-                                              {
-                                                "Ref": "AWS::StackId"
-                                              }
-                                            ]
-                                          }
-                                        ]
-                                      }
-                                    ]
-                                  }
-                                ]
-                              }
-                            ]
-                          ]
-                        },
-                        "/*"
-                      ]
-                    ]
-                  }
-                }
-              ],
-              "Version": "2012-10-17"
-            },
-            "PolicyName": "CognitoAccessPolicy"
-          }
-        ]
-      }
-    },
-    "testlambdaelasticsearchkibana4IdentityPoolRoleMapping9378D177": {
-      "Type": "AWS::Cognito::IdentityPoolRoleAttachment",
-      "Properties": {
-        "IdentityPoolId": {
-          "Ref": "testlambdaelasticsearchkibana4CognitoIdentityPool76EE9793"
-        },
-        "Roles": {
-          "authenticated": {
-            "Fn::GetAtt": [
-              "testlambdaelasticsearchkibana4CognitoAuthorizedRoleA7D6B392",
-              "Arn"
-            ]
-          }
-        }
-      }
-    },
-    "testlambdaelasticsearchkibana4CognitoDashboardConfigureRoleB36C775C": {
-      "Type": "AWS::IAM::Role",
-      "Properties": {
-        "AssumeRolePolicyDocument": {
-          "Statement": [
-            {
-              "Action": "sts:AssumeRole",
-              "Effect": "Allow",
-              "Principal": {
-                "Service": "es.amazonaws.com"
-              }
-            }
-          ],
-          "Version": "2012-10-17"
-        }
-      }
-    },
-    "testlambdaelasticsearchkibana4CognitoDashboardConfigureRolePolicy1D82A101": {
-      "Type": "AWS::IAM::Policy",
-      "Properties": {
-        "PolicyDocument": {
-          "Statement": [
-            {
-              "Action": [
-                "cognito-idp:DescribeUserPool",
-                "cognito-idp:CreateUserPoolClient",
-                "cognito-idp:DeleteUserPoolClient",
-                "cognito-idp:DescribeUserPoolClient",
-                "cognito-idp:AdminInitiateAuth",
-                "cognito-idp:AdminUserGlobalSignOut",
-                "cognito-idp:ListUserPoolClients",
-                "cognito-identity:DescribeIdentityPool",
-                "cognito-identity:UpdateIdentityPool",
-                "cognito-identity:SetIdentityPoolRoles",
-                "cognito-identity:GetIdentityPoolRoles",
-                "es:UpdateDomainConfig"
-              ],
-              "Effect": "Allow",
-              "Resource": [
-                {
-                  "Fn::GetAtt": [
-                    "testlambdaelasticsearchkibana4CognitoUserPool37A5CDE1",
-                    "Arn"
-                  ]
-                },
-                {
-                  "Fn::Join": [
-                    "",
-                    [
-                      "arn:",
-                      {
-                        "Ref": "AWS::Partition"
-                      },
-                      ":cognito-identity:",
-                      {
-                        "Ref": "AWS::Region"
-                      },
-                      ":",
-                      {
-                        "Ref": "AWS::AccountId"
-                      },
-                      ":identitypool/",
-                      {
-                        "Ref": "testlambdaelasticsearchkibana4CognitoIdentityPool76EE9793"
-                      }
-                    ]
-                  ]
-                },
-                {
-                  "Fn::Join": [
-                    "",
-                    [
-                      "arn:",
-                      {
-                        "Ref": "AWS::Partition"
-                      },
-                      ":es:",
-                      {
-                        "Ref": "AWS::Region"
-                      },
-                      ":",
-                      {
-                        "Ref": "AWS::AccountId"
-                      },
-                      ":domain/",
-                      {
-                        "Fn::Join": [
-                          "-",
-                          [
-                            "dmn",
-                            {
-                              "Fn::Select": [
-                                4,
-                                {
-                                  "Fn::Split": [
-                                    "-",
-                                    {
-                                      "Fn::Select": [
-                                        2,
-                                        {
-                                          "Fn::Split": [
-                                            "/",
-                                            {
-                                              "Ref": "AWS::StackId"
-                                            }
-                                          ]
-                                        }
-                                      ]
-                                    }
-                                  ]
-                                }
-                              ]
-                            }
-                          ]
-                        ]
-                      }
-                    ]
-                  ]
-                }
-              ]
-            },
-            {
-              "Action": "iam:PassRole",
-              "Condition": {
-                "StringLike": {
-                  "iam:PassedToService": "cognito-identity.amazonaws.com"
-                }
-              },
-              "Effect": "Allow",
-              "Resource": {
-                "Fn::GetAtt": [
-                  "testlambdaelasticsearchkibana4CognitoDashboardConfigureRoleB36C775C",
-                  "Arn"
-                ]
-              }
-            }
-          ],
-          "Version": "2012-10-17"
-        },
-        "PolicyName": "testlambdaelasticsearchkibana4CognitoDashboardConfigureRolePolicy1D82A101",
-        "Roles": [
-          {
-            "Ref": "testlambdaelasticsearchkibana4CognitoDashboardConfigureRoleB36C775C"
-          }
-        ]
-      }
-    },
-    "testlambdaelasticsearchkibana4OpenSearchDomain94EAD3A3": {
-      "Type": "AWS::OpenSearchService::Domain",
-      "Properties": {
-        "AccessPolicies": {
-          "Statement": [
-            {
-              "Action": "es:ESHttp*",
-              "Effect": "Allow",
-              "Principal": {
-                "AWS": [
-                  {
-                    "Fn::GetAtt": [
-                      "testlambdaelasticsearchkibana4CognitoAuthorizedRoleA7D6B392",
-                      "Arn"
-                    ]
-                  },
-                  {
-                    "Fn::GetAtt": [
-                      "testlambdaelasticsearchkibana4LambdaFunctionServiceRoleA52BB7F9",
-                      "Arn"
-                    ]
-                  }
-                ]
-              },
-              "Resource": {
-                "Fn::Join": [
-                  "",
-                  [
-                    "arn:",
-                    {
-                      "Ref": "AWS::Partition"
-                    },
-                    ":es:",
-                    {
-                      "Ref": "AWS::Region"
-                    },
-                    ":",
-                    {
-                      "Ref": "AWS::AccountId"
-                    },
-                    ":domain/",
-                    {
-                      "Fn::Join": [
-                        "-",
-                        [
-                          "dmn",
-                          {
-                            "Fn::Select": [
-                              4,
-                              {
-                                "Fn::Split": [
-                                  "-",
-                                  {
-                                    "Fn::Select": [
-                                      2,
-                                      {
-                                        "Fn::Split": [
-                                          "/",
-                                          {
-                                            "Ref": "AWS::StackId"
-                                          }
-                                        ]
-                                      }
-                                    ]
-                                  }
-                                ]
-                              }
-                            ]
-                          }
-                        ]
-                      ]
-                    },
-                    "/*"
-                  ]
-                ]
-              }
-            }
-          ],
-          "Version": "2012-10-17"
-        },
-        "ClusterConfig": {
-          "DedicatedMasterCount": 3,
-          "DedicatedMasterEnabled": true,
-          "InstanceCount": 3,
-          "ZoneAwarenessConfig": {
-            "AvailabilityZoneCount": 3
-          },
-          "ZoneAwarenessEnabled": true
-        },
-        "CognitoOptions": {
-          "Enabled": true,
-          "IdentityPoolId": {
-            "Ref": "testlambdaelasticsearchkibana4CognitoIdentityPool76EE9793"
-          },
-          "RoleArn": {
-            "Fn::GetAtt": [
-              "testlambdaelasticsearchkibana4CognitoDashboardConfigureRoleB36C775C",
-              "Arn"
-            ]
-          },
-          "UserPoolId": {
-            "Ref": "testlambdaelasticsearchkibana4CognitoUserPool37A5CDE1"
-          }
-        },
-        "DomainEndpointOptions": {
-          "EnforceHTTPS": true,
-          "TLSSecurityPolicy": "Policy-Min-TLS-1-2-2019-07"
-        },
-        "DomainName": {
-          "Fn::Join": [
-            "-",
-            [
-              "dmn",
-              {
-                "Fn::Select": [
-                  4,
-                  {
-                    "Fn::Split": [
-                      "-",
-                      {
-                        "Fn::Select": [
-                          2,
-                          {
-                            "Fn::Split": [
-                              "/",
-                              {
-                                "Ref": "AWS::StackId"
-                              }
-                            ]
-                          }
-                        ]
-                      }
-                    ]
-                  }
-                ]
-              }
-            ]
-          ]
-        },
-        "EBSOptions": {
-          "EBSEnabled": true,
-          "VolumeSize": 10
-        },
-        "EncryptionAtRestOptions": {
-          "Enabled": true
-        },
-        "EngineVersion": "OpenSearch_1.3",
-        "NodeToNodeEncryptionOptions": {
-          "Enabled": true
-        },
-        "SnapshotOptions": {
-          "AutomatedSnapshotStartHour": 1
-        },
-        "VPCOptions": {
-          "SecurityGroupIds": [
-            {
-              "Fn::GetAtt": [
-                "testlambdaelasticsearchkibana4ReplaceDefaultSecurityGroupsecuritygroupA79E2B92",
-                "GroupId"
-              ]
-            }
-          ],
-          "SubnetIds": [
-            {
-              "Ref": "VpcPrivateSubnet1Subnet536B997A"
-            },
-            {
-              "Ref": "VpcPrivateSubnet2Subnet3788AAA1"
-            },
-            {
-              "Ref": "VpcPrivateSubnet3SubnetF258B56E"
-            }
-          ]
-        }
-      },
-      "Metadata": {
-        "cfn_nag": {
-          "rules_to_suppress": [
-            {
-              "id": "W28",
-              "reason": "The OpenSearch Service domain is passed dynamically as as parameter and explicitly specified to ensure that IAM policies are configured to lockdown access to this specific OpenSearch Service instance only"
-            },
-            {
-              "id": "W90",
-              "reason": "This is not a rule for the general case, just for specific use cases/industries"
-            }
-          ]
-        }
-      }
-    },
-    "testlambdaelasticsearchkibana4StatusRedAlarm56DEE5C7": {
-      "Type": "AWS::CloudWatch::Alarm",
-      "Properties": {
-        "AlarmDescription": "At least one primary shard and its replicas are not allocated to a node. ",
-        "ComparisonOperator": "GreaterThanOrEqualToThreshold",
-        "EvaluationPeriods": 1,
-        "MetricName": "ClusterStatus.red",
-        "Namespace": "AWS/ES",
-        "Period": 60,
-        "Statistic": "Maximum",
-        "Threshold": 1
-      }
-    },
-    "testlambdaelasticsearchkibana4StatusYellowAlarm810B4F9E": {
-      "Type": "AWS::CloudWatch::Alarm",
-      "Properties": {
-        "AlarmDescription": "At least one replica shard is not allocated to a node.",
-        "ComparisonOperator": "GreaterThanOrEqualToThreshold",
-        "EvaluationPeriods": 1,
-        "MetricName": "ClusterStatus.yellow",
-        "Namespace": "AWS/ES",
-        "Period": 60,
-        "Statistic": "Maximum",
-        "Threshold": 1
-      }
-    },
-    "testlambdaelasticsearchkibana4FreeStorageSpaceTooLowAlarmF3FB31EA": {
-      "Type": "AWS::CloudWatch::Alarm",
-      "Properties": {
-        "AlarmDescription": "A node in your cluster is down to 20 GiB of free storage space.",
-        "ComparisonOperator": "LessThanOrEqualToThreshold",
-        "EvaluationPeriods": 1,
-        "MetricName": "FreeStorageSpace",
-        "Namespace": "AWS/ES",
-        "Period": 60,
-        "Statistic": "Minimum",
-        "Threshold": 20000
-      }
-    },
-    "testlambdaelasticsearchkibana4IndexWritesBlockedTooHighAlarmF2968C92": {
-      "Type": "AWS::CloudWatch::Alarm",
-      "Properties": {
-        "AlarmDescription": "Your cluster is blocking write requests.",
-        "ComparisonOperator": "GreaterThanOrEqualToThreshold",
-        "EvaluationPeriods": 1,
-        "MetricName": "ClusterIndexWritesBlocked",
-        "Namespace": "AWS/ES",
-        "Period": 300,
-        "Statistic": "Maximum",
-        "Threshold": 1
-      }
-    },
-    "testlambdaelasticsearchkibana4AutomatedSnapshotFailureTooHighAlarm53EB1ABB": {
-      "Type": "AWS::CloudWatch::Alarm",
-      "Properties": {
-        "AlarmDescription": "An automated snapshot failed. This failure is often the result of a red cluster health status.",
-        "ComparisonOperator": "GreaterThanOrEqualToThreshold",
-        "EvaluationPeriods": 1,
-        "MetricName": "AutomatedSnapshotFailure",
-        "Namespace": "AWS/ES",
-        "Period": 60,
-        "Statistic": "Maximum",
-        "Threshold": 1
-      }
-    },
-    "testlambdaelasticsearchkibana4CPUUtilizationTooHighAlarm29B67D10": {
-      "Type": "AWS::CloudWatch::Alarm",
-      "Properties": {
-        "AlarmDescription": "100% CPU utilization is not uncommon, but sustained high usage is problematic. Consider using larger instance types or adding instances.",
-        "ComparisonOperator": "GreaterThanOrEqualToThreshold",
-        "EvaluationPeriods": 3,
-        "MetricName": "CPUUtilization",
-        "Namespace": "AWS/ES",
-        "Period": 900,
-        "Statistic": "Average",
-        "Threshold": 80
-      }
-    },
-    "testlambdaelasticsearchkibana4JVMMemoryPressureTooHighAlarm9DDED711": {
-      "Type": "AWS::CloudWatch::Alarm",
-      "Properties": {
-        "AlarmDescription": "Average JVM memory pressure over last 15 minutes too high. Consider scaling vertically.",
-        "ComparisonOperator": "GreaterThanOrEqualToThreshold",
-        "EvaluationPeriods": 1,
-        "MetricName": "JVMMemoryPressure",
-        "Namespace": "AWS/ES",
-        "Period": 900,
-        "Statistic": "Average",
-        "Threshold": 80
-      }
-    },
-    "testlambdaelasticsearchkibana4MasterCPUUtilizationTooHighAlarmE66867F2": {
-      "Type": "AWS::CloudWatch::Alarm",
-      "Properties": {
-        "AlarmDescription": "Average CPU utilization over last 45 minutes too high. Consider using larger instance types for your dedicated master nodes.",
-        "ComparisonOperator": "GreaterThanOrEqualToThreshold",
-        "EvaluationPeriods": 3,
-        "MetricName": "MasterCPUUtilization",
-        "Namespace": "AWS/ES",
-        "Period": 900,
-        "Statistic": "Average",
-        "Threshold": 50
-      }
-    },
-    "testlambdaelasticsearchkibana4MasterJVMMemoryPressureTooHighAlarm83E1822E": {
-      "Type": "AWS::CloudWatch::Alarm",
-      "Properties": {
-        "AlarmDescription": "Average JVM memory pressure over last 15 minutes too high. Consider scaling vertically.",
-        "ComparisonOperator": "GreaterThanOrEqualToThreshold",
-        "EvaluationPeriods": 1,
-        "MetricName": "MasterJVMMemoryPressure",
-        "Namespace": "AWS/ES",
-        "Period": 900,
-        "Statistic": "Average",
-        "Threshold": 50
-      }
-    }
-  },
-  "Parameters": {
-    "BootstrapVersion": {
-      "Type": "AWS::SSM::Parameter::Value<String>",
-      "Default": "/cdk-bootstrap/hnb659fds/version",
-      "Description": "Version of the CDK Bootstrap resources in this environment, automatically retrieved from SSM Parameter Store. [cdk:skip]"
-    }
-  },
-  "Rules": {
-    "CheckBootstrapVersion": {
-      "Assertions": [
-        {
-          "Assert": {
-            "Fn::Not": [
-              {
-                "Fn::Contains": [
-                  [
-                    "1",
-                    "2",
-                    "3",
-                    "4",
-                    "5"
-                  ],
-                  {
-                    "Ref": "BootstrapVersion"
-                  }
-                ]
-              }
-            ]
-          },
-          "AssertDescription": "CDK bootstrap stack version 6 required. Please run 'cdk bootstrap' with a recent version of the CDK CLI."
-        }
-      ]
-    }
-  }
-}