AdvancedSecurityOptions

class aws_cdk.aws_elasticsearch.AdvancedSecurityOptions(*, master_user_arn=None, master_user_name=None, master_user_password=None)

Bases: object

(deprecated) Specifies options for fine-grained access control.

Parameters:

  • master_user_arn (Optional[str]) – (deprecated) ARN for the master user. Only specify this or masterUserName, but not both. Default: - fine-grained access control is disabled

  • master_user_name (Optional[str]) – (deprecated) Username for the master user. Only specify this or masterUserArn, but not both. Default: - fine-grained access control is disabled

  • master_user_password (Optional[SecretValue]) – (deprecated) Password for the master user. You can use SecretValue.unsafePlainText to specify a password in plain text or use secretsmanager.Secret.fromSecretAttributes to reference a secret in Secrets Manager. Default: - A Secrets Manager generated password

Deprecated:

use opensearchservice module instead

Stability:

deprecated

ExampleMetadata:

infused

Example:

domain = es.Domain(self, "Domain",
    version=es.ElasticsearchVersion.V7_1,
    enforce_https=True,
    node_to_node_encryption=True,
    encryption_at_rest=es.EncryptionAtRestOptions(
        enabled=True
    ),
    fine_grained_access_control=es.AdvancedSecurityOptions(
        master_user_name="master-user"
    )
)

master_user_password = domain.master_user_password

Attributes

master_user_arn

(deprecated) ARN for the master user.

Only specify this or masterUserName, but not both.

Default:

  • fine-grained access control is disabled

Deprecated:

use opensearchservice module instead

Stability:

deprecated

master_user_name

(deprecated) Username for the master user.

Only specify this or masterUserArn, but not both.

Default:

  • fine-grained access control is disabled

Deprecated:

use opensearchservice module instead

Stability:

deprecated

master_user_password

(deprecated) Password for the master user.

You can use SecretValue.unsafePlainText to specify a password in plain text or use secretsmanager.Secret.fromSecretAttributes to reference a secret in Secrets Manager.

Default:

  • A Secrets Manager generated password

Deprecated:

use opensearchservice module instead

Stability:

deprecated