AWS OpenSearch Service Domain SAML Options

This page shows how to write Terraform and CloudFormation for OpenSearch Service Domain SAML Options and write them securely.

aws_elasticsearch_domain_saml_options (Terraform)

The Domain SAML Options in OpenSearch Service can be configured in Terraform with the resource name aws_elasticsearch_domain_saml_options. The following sections describe how to use the resource and its parameters.

Example Usage from GitHub

An example could not be found in GitHub.

Parameters

The following arguments are required:

  • domain_name - (Required) Name of the domain.

The following arguments are optional:

  • saml_options - (Optional) The SAML authentication options for an AWS Elasticsearch Domain.

saml_options

  • enabled - (Required) Whether SAML authentication is enabled.
  • idp - (Optional) Information from your identity provider.
  • master_backend_role - (Optional) This backend role from the SAML IdP receives full permissions to the cluster, equivalent to a new master user.
  • master_user_name - (Optional) This username from the SAML IdP receives full permissions to the cluster, equivalent to a new master user.
  • roles_key - (Optional) Element of the SAML assertion to use for backend roles. Default is roles.
  • session_timeout_minutes - (Optional) Duration of a session in minutes after a user logs in. Default is 60. Maximum value is 1,440.
  • subject_key - (Optional) Element of the SAML assertion to use for username. Default is NameID.

idp

  • entity_id - (Required) The unique Entity ID of the application in SAML Identity Provider.
  • metadata_content - (Required) The Metadata of the SAML application in xml format.

In addition to all arguments above, the following attributes are exported:

  • id - The name of the domain the SAML options are associated with.

Explanation in Terraform Registry

Manages SAML authentication options for an AWS Elasticsearch Domain.

AWS::Elasticsearch::Domain (CloudFormation)

The Domain in Elasticsearch can be configured in CloudFormation with the resource name AWS::Elasticsearch::Domain. The following sections describe how to use the resource and its parameters.

Parameters

Explanation in CloudFormation Registry

The AWS::Elasticsearch::Domain resource creates an Amazon OpenSearch Service (successor to Amazon Elasticsearch Service) domain.

Important The AWS::Elasticsearch::Domain resource is being replaced by the AWS::OpenSearchService::Domain resource. While the legacy Elasticsearch resource and options are still supported, we recommend modifying your existing Cloudformation templates to use the new OpenSearch Service resource, which supports both OpenSearch and Elasticsearch. For more information about the service rename, see New resource types in the Amazon OpenSearch Service Developer Guide.

Frequently asked questions

What is AWS OpenSearch Service Domain SAML Options?

AWS OpenSearch Service Domain SAML Options is a resource for OpenSearch Service of Amazon Web Service. Settings can be wrote in Terraform and CloudFormation.