software.amazon.awscdk.services.opensearchservice

Interface AdvancedSecurityOptions

All Superinterfaces:

software.amazon.jsii.JsiiSerializable

All Known Implementing Classes:

AdvancedSecurityOptions.Jsii$Proxy

@Generated(value="jsii-pacmak/1.70.0 (build 03c2f6f)",
           date="2022-11-01T13:16:53.764Z")
 @Stability(value=Experimental)
public interface AdvancedSecurityOptions
extends software.amazon.jsii.JsiiSerializable

(experimental) Specifies options for fine-grained access control.

Example:

 Domain domain = Domain.Builder.create(this, "Domain")
         .version(EngineVersion.OPENSEARCH_1_0)
         .enforceHttps(true)
         .nodeToNodeEncryption(true)
         .encryptionAtRest(EncryptionAtRestOptions.builder()
                 .enabled(true)
                 .build())
         .fineGrainedAccessControl(AdvancedSecurityOptions.builder()
                 .masterUserName("master-user")
                 .build())
         .logging(LoggingOptions.builder()
                 .auditLogEnabled(true)
                 .slowSearchLogEnabled(true)
                 .appLogEnabled(true)
                 .slowIndexLogEnabled(true)
                 .build())
         .build();
 

Nested Class Summary

Nested Classes

Modifier and Type	Interface and Description
static class	AdvancedSecurityOptions.Builder A builder for AdvancedSecurityOptions
static class	AdvancedSecurityOptions.Jsii$Proxy An implementation for AdvancedSecurityOptions

Method Summary

Modifier and Type	Method and Description
static AdvancedSecurityOptions.Builder	builder()
default String	getMasterUserArn() (experimental) ARN for the master user.
default String	getMasterUserName() (experimental) Username for the master user.
default SecretValue	getMasterUserPassword() (experimental) Password for the master user.

Methods inherited from interface software.amazon.jsii.JsiiSerializable

$jsii$toJson

Method Detail

getMasterUserArn

@Stability(value=Experimental)
 @Nullable
default String getMasterUserArn()

(experimental) ARN for the master user.

Only specify this or masterUserName, but not both.

Default: - fine-grained access control is disabled

getMasterUserName

@Stability(value=Experimental)
 @Nullable
default String getMasterUserName()

(experimental) Username for the master user.

Only specify this or masterUserArn, but not both.

Default: - fine-grained access control is disabled

getMasterUserPassword

@Stability(value=Experimental)
 @Nullable
default SecretValue getMasterUserPassword()

(experimental) Password for the master user.

You can use SecretValue.unsafePlainText to specify a password in plain text or use secretsmanager.Secret.fromSecretAttributes to reference a secret in Secrets Manager.

Default: - A Secrets Manager generated password

builder

@Stability(value=Experimental)
static AdvancedSecurityOptions.Builder builder()

Returns:

a AdvancedSecurityOptions.Builder of AdvancedSecurityOptions