OpenSearch Service

IAM policy document specifying the access policies for the domain. Required if `create_access_policy` is `false`

List of IAM policy documents that are merged together into the exported document. In merging, statements with non-blank `sid`s will override statements with the same `sid`

List of IAM policy documents that are merged together into the exported document. Statements must have unique `sid`s

A map of IAM policy [statements](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/iam_policy_document#statement) for custom permission usage

Key-value string pairs to specify advanced configuration options. Note that the values for these configuration options must be strings (wrapped in quotes) or they may be wrong and cause a perpetual diff, causing Terraform to want to recreate your Elasticsearch domain on every apply

Configuration block for [fine-grained access control](https://docs.aws.amazon.com/elasticsearch-service/latest/developerguide/fgac.html)

Configuration block for AI/ML options including Natural Language Query Generation, S3 Vectors, and Serverless Vector Acceleration

Configuration block for the Auto-Tune options of the domain

Specified the log class of the log group. Possible values are: STANDARD or INFREQUENT_ACCESS

If a KMS Key ARN is set, this key will be used to encrypt the corresponding log group. Please be sure that the KMS Key has an appropriate key policy (https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/encrypt-log-data-kms.html)

Number of days to retain log events

Set to true if you do not wish the log group (and any logs it may contain) to be deleted at destroy time, and instead just remove the log group from the Terraform state

Name of the resource policy for OpenSearch to log to CloudWatch

Configuration block for the cluster of the domain

Configuration block for authenticating Kibana with Cognito

Determines whether resources will be created (affects all resources)

Determines whether an access policy will be created

Determines whether log groups are created

Determines whether a resource policy will be created for OpenSearch to log to CloudWatch

Determines whether SAML options will be created

Determines if a security group is created

Configuration block for deployment strategy options

Configuration block for domain endpoint HTTP(S) related options

Name of the domain

Configuration block for EBS related options, may be required based on chosen [instance size](https://aws.amazon.com/elasticsearch-service/pricing/)

Determines whether an access policy will be applied to the domain

Configuration block for encrypting at rest

Version of the OpenSearch engine to use. Must follow format 'OpenSearch_X.Y' (e.g., 'OpenSearch_2.11')

Configuration block for enabling and managing IAM Identity Center integration within a domain

The IP address type for the endpoint. Valid values are ipv4 and dualstack

Configuration block for publishing slow and application logs to CloudWatch Logs. This block can be declared multiple times, for each log_type, within the same resource

Configuration block for node-to-node encryption options

Configuration to add Off Peak update options

Map of AWS OpenSearch outbound connections to create

Map of package association IDs to associate with the domain

Region where this resource will be managed. Defaults to the Region set in the provider configuration

SAML authentication options for an AWS OpenSearch Domain

Description of the security group created

Name to use on security group created

Security group ingress and egress rules to add to the security group created

Map of CloudWatch log groups created and their attributes

The Amazon Resource Name (ARN) of the domain

Domain-specific endpoint for Dashboard without https scheme

V2 domain endpoint for Dashboard that works with both IPv4 and IPv6 addresses, without https scheme

Domain-specific endpoint used to submit index, search, and data upload requests

V2 domain endpoint that works with both IPv4 and IPv6 addresses, used to submit index, search, and data upload requests

Dual stack hosted zone ID for the domain.

The unique identifier for the domain

The name of the domain

Map of outbound connections created and their attributes

Map of package associations created and their attributes

Amazon Resource Name (ARN) of the security group

ID of the security group

Map of VPC endpoints created and their attributes