This terraform module creates an OpenSearch domain on AWS.

Prerequisite

This module requires an IAM service linked role for OpenSearch on the AWS account.

To create an OpenSearch service role in terraform:

resource "aws_iam_service_linked_role" "opensearch-service-role" {
  aws_service_name = "opensearchservice.amazonaws.com"
}

OpenSearch Service automatically creates a new OpenSearch service-linked role the first time you create an OpenSearch domain if you have permissions for the iam:CreateServiceLinkedRole action and the legacy Elasticsearch role doesn't exist in your account.

There can be only one service linked role for per AWS account.

You may run into an error like this when trying to remove the service linked role if there is still an OpenSearch domain in the account:

Error: Error waiting for role (arn:aws:iam::000000000000:role/aws-service-role/es.amazonaws.com/AWSServiceRoleForAmazonElasticsearchService) to be deleted: unexpected state 'FAILED', wanted target 'SUCCEEDED'.

You will need to ensure all the domains are completely removed before attempting to remove the service linked service role. If it appears like all the domains have already been removed, you can try again.

Smallest complete fully working example. This example might require extra resources to run the example.

• Minimal

This module creates:

• a new OpenSearch domain in AWS

No provider.

[
  "ES_APPLICATION_LOGS",
  "SEARCH_SLOW_LOGS",
  "INDEX_SLOW_LOGS"
]

This repo is based on:

• terraform standard module structure
• templated terraform module

Run make terraform/docs to generate the section of docs around terraform inputs, outputs and requirements.

Run make lint, this will run terraform fmt, in addition to a few other checks to detect whitespace issues. NOTE: this requires having docker working on the machine running the test

• Update version contained in VERSION
• Document changes in CHANGELOG.md
• Create a tag in github for the commit associated with the version

Apache 2 Licensed. See LICENSE for full details.