AWS Cloud Formation Template To Provision Elastic Search - elasticsearch

Question

I want to configure an ES domain through cloudformation template.
I have a service that would be using this ES Domain, so whenever that service is deployed to ECS, I would like to create an ES domain first and use the ES endpoint in my service.
Would this template help ?
Also, how would I set the ES endpoint that is newly created in SSM through the template?
{
"AWSTemplateFormatVersion": "2010-09-09",
"Resources": {
"taskRole": {
"Type": "AWS::IAM::Role",
"Properties": {
"AssumeRolePolicyDocument": {
"Version": "2012-10-17",
"Statement": [
{
"Sid": "",
"Effect": "Allow",
"Principal": {
"Service": "ecs-tasks.amazonaws.com"
},
"Action": "sts:AssumeRole"
}
]
},
"Path": "/",
"Policies": [
{
"PolicyName": "taskRole",
"PolicyDocument": {
"Statement": [
{
"Effect": "Allow",
"Action": [
"ssm:GetParametersByPath",
"ssm:GetParameter"
],
"Resource": "arn:aws:ssm:*:*:parameter/*"
}
]
}
}
]
}
},
"ElasticsearchDomain": {
"Type": "AWS::Elasticsearch::Domain",
"Properties": {
"DomainName": "Test-ES-Domain",
"ElasticsearchClusterConfig": {
"DedicatedMasterEnabled": "true",
"InstanceCount": "2",
"ZoneAwarenessEnabled": "true",
"InstanceType": "m3.medium.elasticsearch",
"DedicatedMasterType": "m3.medium.elasticsearch",
"DedicatedMasterCount": "3"
},
"EBSOptions": {
"EBSEnabled": true,
"Iops": 0,
"VolumeSize": 20,
"VolumeType": "gp2"
},
"SnapshotOptions": {
"AutomatedSnapshotStartHour": "0"
},
"AccessPolicies": {
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Principal": {
"AWS": "arn:aws:iam::123456789012:user/es-user"
},
"Action": "es:*",
"Resource": "arn:aws:es:us-east-1:123456789012:domain/test/*"
}
]
},
"AdvancedOptions": {
"rest.action.multi.allow_explicit_index": "true"
}
}
}
},
"Outputs": {
"serviceRole": {
"Description": "Task role with permission to read configurations from AWS parameter store",
"Value": { "Fn::GetAtt": [ "taskRole", "Arn" ] }
}
}
}

Answer 1

Here are my ES CloudFormation templates: https://github.com/Talderon/AWS_CloudFormation/tree/master/ElasticSearch
Feel free to go through then and pick them apart.
For the SSM part you are asking, I would have to dig a little on that one. :P