@pulumi/aws 5.2.0-alpha.1650047579 → 5.2.0

package/opensearch/domain.js

@@ -0,0 +1,273 @@
+"use strict";
+// *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Domain = void 0;
+const pulumi = require("@pulumi/pulumi");
+const utilities = require("../utilities");
+/**
+ * Manages an Amazon OpenSearch Domain.
+ *
+ * ## Elasticsearch vs. OpenSearch
+ *
+ * Amazon OpenSearch Service is the successor to Amazon Elasticsearch Service and supports OpenSearch and legacy Elasticsearch OSS (up to 7.10, the final open source version of the software).
+ *
+ * OpenSearch Domain configurations are similar in many ways to Elasticsearch Domain configurations. However, there are important differences including these:
+ *
+ * * OpenSearch has `engineVersion` while Elasticsearch has `elastisearchVersion`
+ * * Versions are specified differently - _e.g._, `Elastisearch_7.10` with OpenSearch vs. `7.10` for Elasticsearch.
+ * * `instanceType` argument values end in `search` for OpenSearch vs. `elasticsearch` for Elasticsearch (_e.g._, `t2.micro.search` vs. `t2.micro.elasticsearch`).
+ * * The AWS-managed service-linked role for OpenSearch is called `AWSServiceRoleForAmazonOpenSearchService` instead of `AWSServiceRoleForAmazonElasticsearchService` for Elasticsearch.
+ *
+ * There are also some potentially unexpected similarities in configurations:
+ *
+ * * ARNs for both are prefaced with `arn:aws:es:`.
+ * * Both OpenSearch and Elasticsearch use assume role policies that refer to the `Principal` `Service` as `es.amazonaws.com`.
+ * * IAM policy actions, such as those you will find in `accessPolicies`, are prefaced with `es:` for both.
+ *
+ * ## Example Usage
+ * ### Basic Usage
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as aws from "@pulumi/aws";
+ *
+ * const example = new aws.opensearch.Domain("example", {
+ *     clusterConfig: {
+ *         instanceType: "r4.large.search",
+ *     },
+ *     domainName: "example",
+ *     engineVersion: "Elasticsearch_7.10",
+ *     tags: {
+ *         Domain: "TestDomain",
+ *     },
+ * });
+ * ```
+ * ### Access Policy
+ *
+ * > See also: [`aws.opensearch.DomainPolicy` resource](https://www.terraform.io/docs/providers/aws/r/opensearch_domain_policy.html)
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as aws from "@pulumi/aws";
+ *
+ * const config = new pulumi.Config();
+ * const domain = config.get("domain") || "tf-test";
+ * const currentRegion = aws.getRegion({});
+ * const currentCallerIdentity = aws.getCallerIdentity({});
+ * const example = new aws.opensearch.Domain("example", {
+ *     domainName: domain,
+ *     accessPolicies: Promise.all([currentRegion, currentCallerIdentity]).then(([currentRegion, currentCallerIdentity]) => `{
+ *   "Version": "2012-10-17",
+ *   "Statement": [
+ *     {
+ *       "Action": "es:*",
+ *       "Principal": "*",
+ *       "Effect": "Allow",
+ *       "Resource": "arn:aws:es:${currentRegion.name}:${currentCallerIdentity.accountId}:domain/${domain}/*",
+ *       "Condition": {
+ *         "IpAddress": {"aws:SourceIp": ["66.193.100.22/32"]}
+ *       }
+ *     }
+ *   ]
+ * }
+ * `),
+ * });
+ * ```
+ * ### Log Publishing to CloudWatch Logs
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as aws from "@pulumi/aws";
+ *
+ * const exampleLogGroup = new aws.cloudwatch.LogGroup("exampleLogGroup", {});
+ * const exampleLogResourcePolicy = new aws.cloudwatch.LogResourcePolicy("exampleLogResourcePolicy", {
+ *     policyName: "example",
+ *     policyDocument: `{
+ *   "Version": "2012-10-17",
+ *   "Statement": [
+ *     {
+ *       "Effect": "Allow",
+ *       "Principal": {
+ *         "Service": "es.amazonaws.com"
+ *       },
+ *       "Action": [
+ *         "logs:PutLogEvents",
+ *         "logs:PutLogEventsBatch",
+ *         "logs:CreateLogStream"
+ *       ],
+ *       "Resource": "arn:aws:logs:*"
+ *     }
+ *   ]
+ * }
+ * `,
+ * });
+ * // .. other configuration ...
+ * const exampleDomain = new aws.opensearch.Domain("exampleDomain", {logPublishingOptions: [{
+ *     cloudwatchLogGroupArn: exampleLogGroup.arn,
+ *     logType: "INDEX_SLOW_LOGS",
+ * }]});
+ * ```
+ * ### VPC based OpenSearch
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as aws from "@pulumi/aws";
+ *
+ * const config = new pulumi.Config();
+ * const vpc = config.requireObject("vpc");
+ * const domain = config.get("domain") || "tf-test";
+ * const exampleVpc = aws.ec2.getVpc({
+ *     tags: {
+ *         Name: vpc,
+ *     },
+ * });
+ * const exampleSubnetIds = exampleVpc.then(exampleVpc => aws.ec2.getSubnetIds({
+ *     vpcId: exampleVpc.id,
+ *     tags: {
+ *         Tier: "private",
+ *     },
+ * }));
+ * const currentRegion = aws.getRegion({});
+ * const currentCallerIdentity = aws.getCallerIdentity({});
+ * const exampleSecurityGroup = new aws.ec2.SecurityGroup("exampleSecurityGroup", {
+ *     description: "Managed by Terraform",
+ *     vpcId: exampleVpc.then(exampleVpc => exampleVpc.id),
+ *     ingress: [{
+ *         fromPort: 443,
+ *         toPort: 443,
+ *         protocol: "tcp",
+ *         cidrBlocks: [exampleVpc.then(exampleVpc => exampleVpc.cidrBlock)],
+ *     }],
+ * });
+ * const exampleServiceLinkedRole = new aws.iam.ServiceLinkedRole("exampleServiceLinkedRole", {awsServiceName: "opensearchservice.amazonaws.com"});
+ * const exampleDomain = new aws.opensearch.Domain("exampleDomain", {
+ *     domainName: domain,
+ *     engineVersion: "OpenSearch_1.0",
+ *     clusterConfig: {
+ *         instanceType: "m4.large.search",
+ *         zoneAwarenessEnabled: true,
+ *     },
+ *     vpcOptions: {
+ *         subnetIds: [
+ *             exampleSubnetIds.then(exampleSubnetIds => exampleSubnetIds.ids?[0]),
+ *             exampleSubnetIds.then(exampleSubnetIds => exampleSubnetIds.ids?[1]),
+ *         ],
+ *         securityGroupIds: [exampleSecurityGroup.id],
+ *     },
+ *     advancedOptions: {
+ *         "rest.action.multi.allow_explicit_index": "true",
+ *     },
+ *     accessPolicies: Promise.all([currentRegion, currentCallerIdentity]).then(([currentRegion, currentCallerIdentity]) => `{
+ * 	"Version": "2012-10-17",
+ * 	"Statement": [
+ * 		{
+ * 			"Action": "es:*",
+ * 			"Principal": "*",
+ * 			"Effect": "Allow",
+ * 			"Resource": "arn:aws:es:${currentRegion.name}:${currentCallerIdentity.accountId}:domain/${domain}/*"
+ * 		}
+ * 	]
+ * }
+ * `),
+ *     tags: {
+ *         Domain: "TestDomain",
+ *     },
+ * }, {
+ *     dependsOn: [exampleServiceLinkedRole],
+ * });
+ * ```
+ *
+ * ## Import
+ *
+ * OpenSearch domains can be imported using the `domain_name`, e.g.,
+ *
+ * ```sh
+ *  $ pulumi import aws:opensearch/domain:Domain example domain_name
+ * ```
+ */
+class Domain extends pulumi.CustomResource {
+    constructor(name, argsOrState, opts) {
+        let resourceInputs = {};
+        opts = opts || {};
+        if (opts.id) {
+            const state = argsOrState;
+            resourceInputs["accessPolicies"] = state ? state.accessPolicies : undefined;
+            resourceInputs["advancedOptions"] = state ? state.advancedOptions : undefined;
+            resourceInputs["advancedSecurityOptions"] = state ? state.advancedSecurityOptions : undefined;
+            resourceInputs["arn"] = state ? state.arn : undefined;
+            resourceInputs["autoTuneOptions"] = state ? state.autoTuneOptions : undefined;
+            resourceInputs["clusterConfig"] = state ? state.clusterConfig : undefined;
+            resourceInputs["cognitoOptions"] = state ? state.cognitoOptions : undefined;
+            resourceInputs["domainEndpointOptions"] = state ? state.domainEndpointOptions : undefined;
+            resourceInputs["domainId"] = state ? state.domainId : undefined;
+            resourceInputs["domainName"] = state ? state.domainName : undefined;
+            resourceInputs["ebsOptions"] = state ? state.ebsOptions : undefined;
+            resourceInputs["encryptAtRest"] = state ? state.encryptAtRest : undefined;
+            resourceInputs["endpoint"] = state ? state.endpoint : undefined;
+            resourceInputs["engineVersion"] = state ? state.engineVersion : undefined;
+            resourceInputs["kibanaEndpoint"] = state ? state.kibanaEndpoint : undefined;
+            resourceInputs["logPublishingOptions"] = state ? state.logPublishingOptions : undefined;
+            resourceInputs["nodeToNodeEncryption"] = state ? state.nodeToNodeEncryption : undefined;
+            resourceInputs["snapshotOptions"] = state ? state.snapshotOptions : undefined;
+            resourceInputs["tags"] = state ? state.tags : undefined;
+            resourceInputs["tagsAll"] = state ? state.tagsAll : undefined;
+            resourceInputs["vpcOptions"] = state ? state.vpcOptions : undefined;
+        }
+        else {
+            const args = argsOrState;
+            if ((!args || args.domainName === undefined) && !opts.urn) {
+                throw new Error("Missing required property 'domainName'");
+            }
+            resourceInputs["accessPolicies"] = args ? args.accessPolicies : undefined;
+            resourceInputs["advancedOptions"] = args ? args.advancedOptions : undefined;
+            resourceInputs["advancedSecurityOptions"] = args ? args.advancedSecurityOptions : undefined;
+            resourceInputs["autoTuneOptions"] = args ? args.autoTuneOptions : undefined;
+            resourceInputs["clusterConfig"] = args ? args.clusterConfig : undefined;
+            resourceInputs["cognitoOptions"] = args ? args.cognitoOptions : undefined;
+            resourceInputs["domainEndpointOptions"] = args ? args.domainEndpointOptions : undefined;
+            resourceInputs["domainName"] = args ? args.domainName : undefined;
+            resourceInputs["ebsOptions"] = args ? args.ebsOptions : undefined;
+            resourceInputs["encryptAtRest"] = args ? args.encryptAtRest : undefined;
+            resourceInputs["engineVersion"] = args ? args.engineVersion : undefined;
+            resourceInputs["logPublishingOptions"] = args ? args.logPublishingOptions : undefined;
+            resourceInputs["nodeToNodeEncryption"] = args ? args.nodeToNodeEncryption : undefined;
+            resourceInputs["snapshotOptions"] = args ? args.snapshotOptions : undefined;
+            resourceInputs["tags"] = args ? args.tags : undefined;
+            resourceInputs["tagsAll"] = args ? args.tagsAll : undefined;
+            resourceInputs["vpcOptions"] = args ? args.vpcOptions : undefined;
+            resourceInputs["arn"] = undefined /*out*/;
+            resourceInputs["domainId"] = undefined /*out*/;
+            resourceInputs["endpoint"] = undefined /*out*/;
+            resourceInputs["kibanaEndpoint"] = undefined /*out*/;
+        }
+        opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
+        super(Domain.__pulumiType, name, resourceInputs, opts);
+    }
+    /**
+     * Get an existing Domain resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name, id, state, opts) {
+        return new Domain(name, state, Object.assign(Object.assign({}, opts), { id: id }));
+    }
+    /**
+     * Returns true if the given object is an instance of Domain.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj) {
+        if (obj === undefined || obj === null) {
+            return false;
+        }
+        return obj['__pulumiType'] === Domain.__pulumiType;
+    }
+}
+exports.Domain = Domain;
+/** @internal */
+Domain.__pulumiType = 'aws:opensearch/domain:Domain';
+//# sourceMappingURL=domain.js.map

package/opensearch/domain.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"domain.js","sourceRoot":"","sources":["../../opensearch/domain.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AAEzC,0CAA0C;AAE1C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoLG;AACH,MAAa,MAAO,SAAQ,MAAM,CAAC,cAAc;IAgH7C,YAAY,IAAY,EAAE,WAAsC,EAAE,IAAmC;QACjG,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAsC,CAAC;YACrD,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,yBAAyB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9F,cAAc,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,uBAAuB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1F,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,sBAAsB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC;YACxF,cAAc,CAAC,sBAAsB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC;YACxF,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;SACvE;aAAM;YACH,MAAM,IAAI,GAAG,WAAqC,CAAC;YACnD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACvD,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;aAC7D;YACD,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,yBAAyB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5F,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,uBAAuB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC;YACxF,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,sBAAsB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC;YACtF,cAAc,CAAC,sBAAsB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC;YACtF,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,KAAK,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC1C,cAAc,CAAC,UAAU,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC/C,cAAc,CAAC,UAAU,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC/C,cAAc,CAAC,gBAAgB,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SACxD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,MAAM,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAC3D,CAAC;IAtKD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAmB,EAAE,IAAmC;QACjH,OAAO,IAAI,MAAM,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAC7D,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,MAAM,CAAC,YAAY,CAAC;IACvD,CAAC;;AA1BL,wBAwKC;AA1JG,gBAAgB;AACO,mBAAY,GAAG,8BAA8B,CAAC"}

package/opensearch/domainPolicy.d.ts

@@ -0,0 +1,93 @@
+import * as pulumi from "@pulumi/pulumi";
+/**
+ * Allows setting policy to an OpenSearch domain while referencing domain attributes (e.g., ARN).
+ *
+ * ## Example Usage
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as aws from "@pulumi/aws";
+ *
+ * const example = new aws.opensearch.Domain("example", {
+ *     domainName: "tf-test",
+ *     engineVersion: "OpenSearch_1.1",
+ * });
+ * const main = new aws.opensearch.DomainPolicy("main", {
+ *     domainName: example.domainName,
+ *     accessPolicies: pulumi.interpolate`{
+ *     "Version": "2012-10-17",
+ *     "Statement": [
+ *         {
+ *             "Action": "es:*",
+ *             "Principal": "*",
+ *             "Effect": "Allow",
+ *             "Condition": {
+ *                 "IpAddress": {"aws:SourceIp": "127.0.0.1/32"}
+ *             },
+ *             "Resource": "${example.arn}/*"
+ *         }
+ *     ]
+ * }
+ * `,
+ * });
+ * ```
+ */
+export declare class DomainPolicy extends pulumi.CustomResource {
+    /**
+     * Get an existing DomainPolicy resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name: string, id: pulumi.Input<pulumi.ID>, state?: DomainPolicyState, opts?: pulumi.CustomResourceOptions): DomainPolicy;
+    /**
+     * Returns true if the given object is an instance of DomainPolicy.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj: any): obj is DomainPolicy;
+    /**
+     * IAM policy document specifying the access policies for the domain
+     */
+    readonly accessPolicies: pulumi.Output<string>;
+    /**
+     * Name of the domain.
+     */
+    readonly domainName: pulumi.Output<string>;
+    /**
+     * Create a DomainPolicy resource with the given unique name, arguments, and options.
+     *
+     * @param name The _unique_ name of the resource.
+     * @param args The arguments to use to populate this resource's properties.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: DomainPolicyArgs, opts?: pulumi.CustomResourceOptions);
+}
+/**
+ * Input properties used for looking up and filtering DomainPolicy resources.
+ */
+export interface DomainPolicyState {
+    /**
+     * IAM policy document specifying the access policies for the domain
+     */
+    accessPolicies?: pulumi.Input<string>;
+    /**
+     * Name of the domain.
+     */
+    domainName?: pulumi.Input<string>;
+}
+/**
+ * The set of arguments for constructing a DomainPolicy resource.
+ */
+export interface DomainPolicyArgs {
+    /**
+     * IAM policy document specifying the access policies for the domain
+     */
+    accessPolicies: pulumi.Input<string>;
+    /**
+     * Name of the domain.
+     */
+    domainName: pulumi.Input<string>;
+}

package/opensearch/domainPolicy.js

@@ -0,0 +1,90 @@
+"use strict";
+// *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DomainPolicy = void 0;
+const pulumi = require("@pulumi/pulumi");
+const utilities = require("../utilities");
+/**
+ * Allows setting policy to an OpenSearch domain while referencing domain attributes (e.g., ARN).
+ *
+ * ## Example Usage
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as aws from "@pulumi/aws";
+ *
+ * const example = new aws.opensearch.Domain("example", {
+ *     domainName: "tf-test",
+ *     engineVersion: "OpenSearch_1.1",
+ * });
+ * const main = new aws.opensearch.DomainPolicy("main", {
+ *     domainName: example.domainName,
+ *     accessPolicies: pulumi.interpolate`{
+ *     "Version": "2012-10-17",
+ *     "Statement": [
+ *         {
+ *             "Action": "es:*",
+ *             "Principal": "*",
+ *             "Effect": "Allow",
+ *             "Condition": {
+ *                 "IpAddress": {"aws:SourceIp": "127.0.0.1/32"}
+ *             },
+ *             "Resource": "${example.arn}/*"
+ *         }
+ *     ]
+ * }
+ * `,
+ * });
+ * ```
+ */
+class DomainPolicy extends pulumi.CustomResource {
+    constructor(name, argsOrState, opts) {
+        let resourceInputs = {};
+        opts = opts || {};
+        if (opts.id) {
+            const state = argsOrState;
+            resourceInputs["accessPolicies"] = state ? state.accessPolicies : undefined;
+            resourceInputs["domainName"] = state ? state.domainName : undefined;
+        }
+        else {
+            const args = argsOrState;
+            if ((!args || args.accessPolicies === undefined) && !opts.urn) {
+                throw new Error("Missing required property 'accessPolicies'");
+            }
+            if ((!args || args.domainName === undefined) && !opts.urn) {
+                throw new Error("Missing required property 'domainName'");
+            }
+            resourceInputs["accessPolicies"] = args ? args.accessPolicies : undefined;
+            resourceInputs["domainName"] = args ? args.domainName : undefined;
+        }
+        opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
+        super(DomainPolicy.__pulumiType, name, resourceInputs, opts);
+    }
+    /**
+     * Get an existing DomainPolicy resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name, id, state, opts) {
+        return new DomainPolicy(name, state, Object.assign(Object.assign({}, opts), { id: id }));
+    }
+    /**
+     * Returns true if the given object is an instance of DomainPolicy.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj) {
+        if (obj === undefined || obj === null) {
+            return false;
+        }
+        return obj['__pulumiType'] === DomainPolicy.__pulumiType;
+    }
+}
+exports.DomainPolicy = DomainPolicy;
+/** @internal */
+DomainPolicy.__pulumiType = 'aws:opensearch/domainPolicy:DomainPolicy';
+//# sourceMappingURL=domainPolicy.js.map

package/opensearch/domainPolicy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"domainPolicy.js","sourceRoot":"","sources":["../../opensearch/domainPolicy.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAE1C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,MAAa,YAAa,SAAQ,MAAM,CAAC,cAAc;IA6CnD,YAAY,IAAY,EAAE,WAAkD,EAAE,IAAmC;QAC7G,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAA4C,CAAC;YAC3D,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;SACvE;aAAM;YACH,MAAM,IAAI,GAAG,WAA2C,CAAC;YACzD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,cAAc,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC3D,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;aACjE;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACvD,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;aAC7D;YACD,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;SACrE;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,YAAY,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACjE,CAAC;IAhED;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAyB,EAAE,IAAmC;QACvH,OAAO,IAAI,YAAY,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IACnE,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,YAAY,CAAC,YAAY,CAAC;IAC7D,CAAC;;AA1BL,oCAkEC;AApDG,gBAAgB;AACO,yBAAY,GAAG,0CAA0C,CAAC"}

package/opensearch/domainSamlOptions.d.ts

@@ -0,0 +1,105 @@
+import * as pulumi from "@pulumi/pulumi";
+import { input as inputs, output as outputs } from "../types";
+/**
+ * Manages SAML authentication options for an AWS OpenSearch Domain.
+ *
+ * ## Example Usage
+ * ### Basic Usage
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as aws from "@pulumi/aws";
+ * import * from "fs";
+ *
+ * const exampleDomain = new aws.opensearch.Domain("exampleDomain", {
+ *     domainName: "example",
+ *     engineVersion: "OpenSearch_1.1",
+ *     clusterConfig: {
+ *         instanceType: "r4.large.search",
+ *     },
+ *     snapshotOptions: {
+ *         automatedSnapshotStartHour: 23,
+ *     },
+ *     tags: {
+ *         Domain: "TestDomain",
+ *     },
+ * });
+ * const exampleDomainSamlOptions = new aws.opensearch.DomainSamlOptions("exampleDomainSamlOptions", {
+ *     domainName: exampleDomain.domainName,
+ *     samlOptions: {
+ *         enabled: true,
+ *         idp: {
+ *             entityId: "https://example.com",
+ *             metadataContent: fs.readFileSync("./saml-metadata.xml"),
+ *         },
+ *     },
+ * });
+ * ```
+ *
+ * ## Import
+ *
+ * OpenSearch domains can be imported using the `domain_name`, e.g.,
+ *
+ * ```sh
+ *  $ pulumi import aws:opensearch/domainSamlOptions:DomainSamlOptions example domain_name
+ * ```
+ */
+export declare class DomainSamlOptions extends pulumi.CustomResource {
+    /**
+     * Get an existing DomainSamlOptions resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name: string, id: pulumi.Input<pulumi.ID>, state?: DomainSamlOptionsState, opts?: pulumi.CustomResourceOptions): DomainSamlOptions;
+    /**
+     * Returns true if the given object is an instance of DomainSamlOptions.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj: any): obj is DomainSamlOptions;
+    /**
+     * Name of the domain.
+     */
+    readonly domainName: pulumi.Output<string>;
+    /**
+     * SAML authentication options for an AWS OpenSearch Domain.
+     */
+    readonly samlOptions: pulumi.Output<outputs.opensearch.DomainSamlOptionsSamlOptions | undefined>;
+    /**
+     * Create a DomainSamlOptions resource with the given unique name, arguments, and options.
+     *
+     * @param name The _unique_ name of the resource.
+     * @param args The arguments to use to populate this resource's properties.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: DomainSamlOptionsArgs, opts?: pulumi.CustomResourceOptions);
+}
+/**
+ * Input properties used for looking up and filtering DomainSamlOptions resources.
+ */
+export interface DomainSamlOptionsState {
+    /**
+     * Name of the domain.
+     */
+    domainName?: pulumi.Input<string>;
+    /**
+     * SAML authentication options for an AWS OpenSearch Domain.
+     */
+    samlOptions?: pulumi.Input<inputs.opensearch.DomainSamlOptionsSamlOptions>;
+}
+/**
+ * The set of arguments for constructing a DomainSamlOptions resource.
+ */
+export interface DomainSamlOptionsArgs {
+    /**
+     * Name of the domain.
+     */
+    domainName: pulumi.Input<string>;
+    /**
+     * SAML authentication options for an AWS OpenSearch Domain.
+     */
+    samlOptions?: pulumi.Input<inputs.opensearch.DomainSamlOptionsSamlOptions>;
+}

package/opensearch/domainSamlOptions.js

@@ -0,0 +1,98 @@
+"use strict";
+// *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DomainSamlOptions = void 0;
+const pulumi = require("@pulumi/pulumi");
+const utilities = require("../utilities");
+/**
+ * Manages SAML authentication options for an AWS OpenSearch Domain.
+ *
+ * ## Example Usage
+ * ### Basic Usage
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as aws from "@pulumi/aws";
+ * import * from "fs";
+ *
+ * const exampleDomain = new aws.opensearch.Domain("exampleDomain", {
+ *     domainName: "example",
+ *     engineVersion: "OpenSearch_1.1",
+ *     clusterConfig: {
+ *         instanceType: "r4.large.search",
+ *     },
+ *     snapshotOptions: {
+ *         automatedSnapshotStartHour: 23,
+ *     },
+ *     tags: {
+ *         Domain: "TestDomain",
+ *     },
+ * });
+ * const exampleDomainSamlOptions = new aws.opensearch.DomainSamlOptions("exampleDomainSamlOptions", {
+ *     domainName: exampleDomain.domainName,
+ *     samlOptions: {
+ *         enabled: true,
+ *         idp: {
+ *             entityId: "https://example.com",
+ *             metadataContent: fs.readFileSync("./saml-metadata.xml"),
+ *         },
+ *     },
+ * });
+ * ```
+ *
+ * ## Import
+ *
+ * OpenSearch domains can be imported using the `domain_name`, e.g.,
+ *
+ * ```sh
+ *  $ pulumi import aws:opensearch/domainSamlOptions:DomainSamlOptions example domain_name
+ * ```
+ */
+class DomainSamlOptions extends pulumi.CustomResource {
+    constructor(name, argsOrState, opts) {
+        let resourceInputs = {};
+        opts = opts || {};
+        if (opts.id) {
+            const state = argsOrState;
+            resourceInputs["domainName"] = state ? state.domainName : undefined;
+            resourceInputs["samlOptions"] = state ? state.samlOptions : undefined;
+        }
+        else {
+            const args = argsOrState;
+            if ((!args || args.domainName === undefined) && !opts.urn) {
+                throw new Error("Missing required property 'domainName'");
+            }
+            resourceInputs["domainName"] = args ? args.domainName : undefined;
+            resourceInputs["samlOptions"] = args ? args.samlOptions : undefined;
+        }
+        opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
+        super(DomainSamlOptions.__pulumiType, name, resourceInputs, opts);
+    }
+    /**
+     * Get an existing DomainSamlOptions resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name, id, state, opts) {
+        return new DomainSamlOptions(name, state, Object.assign(Object.assign({}, opts), { id: id }));
+    }
+    /**
+     * Returns true if the given object is an instance of DomainSamlOptions.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj) {
+        if (obj === undefined || obj === null) {
+            return false;
+        }
+        return obj['__pulumiType'] === DomainSamlOptions.__pulumiType;
+    }
+}
+exports.DomainSamlOptions = DomainSamlOptions;
+/** @internal */
+DomainSamlOptions.__pulumiType = 'aws:opensearch/domainSamlOptions:DomainSamlOptions';
+//# sourceMappingURL=domainSamlOptions.js.map