AWS::OpenSearchService::Domain AdvancedSecurityOptionsInput

Specifies options for fine-grained access control.

If you specify advanced security options, you must also enable node-to-node encryption (NodeToNodeEncryptionOptions) and encryption at rest (EncryptionAtRestOptions). You must also enable EnforceHTTPS within DomainEndpointOptions, which requires HTTPS for all traffic to the domain.

Syntax

To declare this entity in your AWS CloudFormation template, use the following syntax:

JSON


{
  "AnonymousAuthDisableDate" : String,
  "AnonymousAuthEnabled" : Boolean,
  "Enabled" : Boolean,
  "InternalUserDatabaseEnabled" : Boolean,
  "JWTOptions" : JWTOptions,
  "MasterUserOptions" : MasterUserOptions,
  "SAMLOptions" : SAMLOptions
}

YAML


  AnonymousAuthDisableDate: String
  AnonymousAuthEnabled: Boolean
  Enabled: Boolean
  InternalUserDatabaseEnabled: Boolean
  JWTOptions: 
    JWTOptions
  MasterUserOptions: 
    MasterUserOptions
  SAMLOptions: 
    SAMLOptions

Properties

AnonymousAuthDisableDate

Date and time when the migration period will be disabled. Only necessary when enabling fine-grained access control on an existing domain.

Required: No

Type: String

Update requires: No interruption

AnonymousAuthEnabled

True to enable a 30-day migration period during which administrators can create role mappings. Only necessary when enabling fine-grained access control on an existing domain.

Required: No

Type: Boolean

Update requires: No interruption

Enabled

True to enable fine-grained access control. You must also enable encryption of data at rest and node-to-node encryption. See Fine-grained access control in Amazon OpenSearch Service.

Required: No

Type: Boolean

Update requires: No interruption

InternalUserDatabaseEnabled