{"id":21725430,"url":"https://github.com/jameswoolfenden/terraform-aws-elastic","last_synced_at":"2026-04-12T04:38:23.655Z","repository":{"id":52164167,"uuid":"342582789","full_name":"JamesWoolfenden/terraform-aws-elastic","owner":"JamesWoolfenden","description":"Provision an elasticsearch cluster from the AWS managed service","archived":false,"fork":false,"pushed_at":"2023-07-29T20:18:32.000Z","size":75,"stargazers_count":1,"open_issues_count":0,"forks_count":2,"subscribers_count":3,"default_branch":"main","last_synced_at":"2025-01-25T19:27:56.393Z","etag":null,"topics":["aws","elasticsearch","module","terraform"],"latest_commit_sha":null,"homepage":"","language":"HCL","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/JamesWoolfenden.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2021-02-26T13:23:13.000Z","updated_at":"2022-09-19T14:42:47.000Z","dependencies_parsed_at":"2025-01-25T19:36:14.437Z","dependency_job_id":null,"html_url":"https://github.com/JamesWoolfenden/terraform-aws-elastic","commit_stats":null,"previous_names":[],"tags_count":61,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/JamesWoolfenden%2Fterraform-aws-elastic","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/JamesWoolfenden%2Fterraform-aws-elastic/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/JamesWoolfenden%2Fterraform-aws-elastic/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/JamesWoolfenden%2Fterraform-aws-elastic/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/JamesWoolfenden","download_url":"https://codeload.github.com/JamesWoolfenden/terraform-aws-elastic/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":244706500,"owners_count":20496570,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["aws","elasticsearch","module","terraform"],"created_at":"2024-11-26T03:17:35.362Z","updated_at":"2025-12-31T00:03:46.514Z","avatar_url":"https://github.com/JamesWoolfenden.png","language":"HCL","funding_links":[],"categories":[],"sub_categories":[],"readme":"# terraform-aws-elastic\n\n[![Build Status](https://github.com/JamesWoolfenden/terraform-aws-elastic/workflows/Verify%20and%20Bump/badge.svg?branch=main)](https://github.com/JamesWoolfenden/terraform-aws-elastic)\n[![Latest Release](https://img.shields.io/github/release/JamesWoolfenden/terraform-aws-elastic.svg)](https://github.com/JamesWoolfenden/terraform-aws-elastic/releases/latest)\n[![GitHub tag (latest SemVer)](https://img.shields.io/github/tag/JamesWoolfenden/terraform-aws-elastic.svg?label=latest)](https://github.com/JamesWoolfenden/terraform-aws-elastic/releases/latest)\n![Terraform Version](https://img.shields.io/badge/tf-%3E%3D0.14.0-blue.svg)\n[![Infrastructure Tests](https://www.bridgecrew.cloud/badges/github/JamesWoolfenden/terraform-aws-elastic/cis_aws)](https://www.bridgecrew.cloud/link/badge?vcs=github\u0026fullRepo=JamesWoolfenden%2Fterraform-aws-elastic\u0026benchmark=CIS+AWS+V1.2)\n[![pre-commit](https://img.shields.io/badge/pre--commit-enabled-brightgreen?logo=pre-commit\u0026logoColor=white)](https://github.com/pre-commit/pre-commit)\n[![checkov](https://img.shields.io/badge/checkov-verified-brightgreen)](https://www.checkov.io/)\n[![Infrastructure Tests](https://www.bridgecrew.cloud/badges/github/jameswoolfenden/terraform-aws-elastic/general)](https://www.bridgecrew.cloud/link/badge?vcs=github\u0026fullRepo=JamesWoolfenden%2Fterraform-aws-elastic\u0026benchmark=INFRASTRUCTURE+SECURITY)\n\nTerraform module - to provision an Elasticsearch cluster.\n\n---\n\nIt's 100% Open Source and licensed under the [APACHE2](LICENSE).\n\n## Usage\n\nInclude this repository as a module in your existing Terraform code:\n\n```hcl\nmodule \"elastic\" {\n  source      = \"JamesWoolfenden/elastic/aws\"\n  version     = \"0.0.2\"\n  subnets     = var.subnets\n  vpc         = \u003cyour vpc\u003e\n  kms_key_id  = aws_kms_key.elastic.id\n  log_name    = var.log_name\n  common_tags = var.common_tags\n}\n```\n\n\u003c!-- BEGINNING OF PRE-COMMIT-TERRAFORM DOCS HOOK --\u003e\n## Requirements\n\nNo requirements.\n\n## Providers\n\n| Name | Version |\n|------|---------|\n| \u003ca name=\"provider_aws\"\u003e\u003c/a\u003e [aws](#provider\\_aws) | n/a |\n\n## Modules\n\nNo modules.\n\n## Resources\n\n| Name | Type |\n|------|------|\n| [aws_cloudwatch_log_group.examplea](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/cloudwatch_log_group) | resource |\n| [aws_elasticsearch_domain.examplea](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/elasticsearch_domain) | resource |\n| [aws_elasticsearch_domain_policy.examplea](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/elasticsearch_domain_policy) | resource |\n| [aws_iam_service_linked_role.examplea](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iam_service_linked_role) | resource |\n| [aws_security_group.examplea](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/security_group) | resource |\n| [aws_caller_identity.current](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/caller_identity) | data source |\n| [aws_region.current](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/region) | data source |\n\n## Inputs\n\n| Name | Description | Type | Default | Required |\n|------|-------------|------|---------|:--------:|\n| \u003ca name=\"input_advanced_security_options\"\u003e\u003c/a\u003e [advanced\\_security\\_options](#input\\_advanced\\_security\\_options) | n/a | `bool` | `false` | no |\n| \u003ca name=\"input_common_tags\"\u003e\u003c/a\u003e [common\\_tags](#input\\_common\\_tags) | n/a | `map(any)` | n/a | yes |\n| \u003ca name=\"input_cw_kms_key_id\"\u003e\u003c/a\u003e [cw\\_kms\\_key\\_id](#input\\_cw\\_kms\\_key\\_id) | n/a | `any` | n/a | yes |\n| \u003ca name=\"input_dedicated_master_count\"\u003e\u003c/a\u003e [dedicated\\_master\\_count](#input\\_dedicated\\_master\\_count) | n/a | `number` | `1` | no |\n| \u003ca name=\"input_dedicated_master_enabled\"\u003e\u003c/a\u003e [dedicated\\_master\\_enabled](#input\\_dedicated\\_master\\_enabled) | n/a | `bool` | `true` | no |\n| \u003ca name=\"input_dedicated_master_type\"\u003e\u003c/a\u003e [dedicated\\_master\\_type](#input\\_dedicated\\_master\\_type) | n/a | `string` | `\"t2.medium.elasticsearch\"` | no |\n| \u003ca name=\"input_ebs_volume_size\"\u003e\u003c/a\u003e [ebs\\_volume\\_size](#input\\_ebs\\_volume\\_size) | Optionally use EBS volumes for data storage by specifying volume size in GB (default 0) | `number` | `0` | no |\n| \u003ca name=\"input_ebs_volume_type\"\u003e\u003c/a\u003e [ebs\\_volume\\_type](#input\\_ebs\\_volume\\_type) | Storage type of EBS volumes, if used (default gp2) | `string` | `\"gp2\"` | no |\n| \u003ca name=\"input_es_domain\"\u003e\u003c/a\u003e [es\\_domain](#input\\_es\\_domain) | ElasticSearch domain name | `string` | `\"elastic\"` | no |\n| \u003ca name=\"input_es_version\"\u003e\u003c/a\u003e [es\\_version](#input\\_es\\_version) | n/a | `string` | `7.1` | no |\n| \u003ca name=\"input_es_zone_awareness\"\u003e\u003c/a\u003e [es\\_zone\\_awareness](#input\\_es\\_zone\\_awareness) | n/a | `bool` | `true` | no |\n| \u003ca name=\"input_instance_count\"\u003e\u003c/a\u003e [instance\\_count](#input\\_instance\\_count) | n/a | `number` | `1` | no |\n| \u003ca name=\"input_instance_type\"\u003e\u003c/a\u003e [instance\\_type](#input\\_instance\\_type) | n/a | `string` | `\"\"` | no |\n| \u003ca name=\"input_kms_key_id\"\u003e\u003c/a\u003e [kms\\_key\\_id](#input\\_kms\\_key\\_id) | n/a | `string` | `\"aws/es\"` | no |\n| \u003ca name=\"input_log_name\"\u003e\u003c/a\u003e [log\\_name](#input\\_log\\_name) | n/a | `string` | `\"elasticsearch\"` | no |\n| \u003ca name=\"input_log_publishing_options_type\"\u003e\u003c/a\u003e [log\\_publishing\\_options\\_type](#input\\_log\\_publishing\\_options\\_type) | n/a | `string` | `\"AUDIT_LOGS\"` | no |\n| \u003ca name=\"input_retention\"\u003e\u003c/a\u003e [retention](#input\\_retention) | n/a | `number` | `90` | no |\n| \u003ca name=\"input_snapshot_start_hour\"\u003e\u003c/a\u003e [snapshot\\_start\\_hour](#input\\_snapshot\\_start\\_hour) | n/a | `string` | `\"23\"` | no |\n| \u003ca name=\"input_subnets\"\u003e\u003c/a\u003e [subnets](#input\\_subnets) | List of VPC Subnet IDs to create ElasticSearch Endpoints in | `list(string)` | n/a | yes |\n| \u003ca name=\"input_vpc\"\u003e\u003c/a\u003e [vpc](#input\\_vpc) | VPC ID where to launch ElasticSearch cluster | `any` | n/a | yes |\n| \u003ca name=\"input_vpc_cidr\"\u003e\u003c/a\u003e [vpc\\_cidr](#input\\_vpc\\_cidr) | CIDR to allow connections to ElasticSearch | `string` | `\"10.0.0.0/16\"` | no |\n\n## Outputs\n\n| Name | Description |\n|------|-------------|\n| \u003ca name=\"output_elasticsearch\"\u003e\u003c/a\u003e [elasticsearch](#output\\_elasticsearch) | n/a |\n\u003c!-- END OF PRE-COMMIT-TERRAFORM DOCS HOOK --\u003e\n\n## Policy\n\nThis is the policy required to build this project:\n\n\u003c!-- BEGINNING OF PRE-COMMIT-PIKE DOCS HOOK --\u003e\nThe Terraform resource required is:\n\n```golang\nresource \"aws_iam_policy\" \"terraform_pike\" {\n  name_prefix = \"terraform_pike\"\n  path        = \"/\"\n  description = \"Pike Autogenerated policy from IAC\"\n\n  policy = jsonencode({\n    \"Version\": \"2012-10-17\",\n    \"Statement\": [\n        {\n            \"Sid\": \"VisualEditor0\",\n            \"Effect\": \"Allow\",\n            \"Action\": [\n                \"ec2:AuthorizeSecurityGroupIngress\",\n                \"ec2:CreateSecurityGroup\",\n                \"ec2:DeleteSecurityGroup\",\n                \"ec2:DescribeAccountAttributes\",\n                \"ec2:DescribeNetworkInterfaces\",\n                \"ec2:DescribeSecurityGroups\",\n                \"ec2:RevokeSecurityGroupEgress\",\n                \"ec2:RevokeSecurityGroupIngress\"\n            ],\n            \"Resource\": \"*\"\n        },\n        {\n            \"Sid\": \"VisualEditor1\",\n            \"Effect\": \"Allow\",\n            \"Action\": [\n                \"es:AddTags\",\n                \"es:CreateDomain\",\n                \"es:CreateElasticsearchDomain\",\n                \"es:DeleteDomain\",\n                \"es:DeleteElasticsearchDomain\",\n                \"es:DescribeDomainConfig\",\n                \"es:DescribeElasticsearchDomain\",\n                \"es:DescribeElasticsearchDomainConfig\",\n                \"es:ListTags\",\n                \"es:RemoveTags\",\n                \"es:UpdateDomainConfig\",\n                \"es:UpdateElasticsearchDomainConfig\"\n            ],\n            \"Resource\": \"*\"\n        },\n        {\n            \"Sid\": \"VisualEditor2\",\n            \"Effect\": \"Allow\",\n            \"Action\": [\n                \"iam:CreateServiceLinkedRole\",\n                \"iam:DeleteServiceLinkedRole\",\n                \"iam:GetRole\",\n                \"iam:GetServiceLinkedRoleDeletionStatus\",\n                \"iam:UpdateRoleDescription\"\n            ],\n            \"Resource\": \"*\"\n        },\n        {\n            \"Sid\": \"VisualEditor3\",\n            \"Effect\": \"Allow\",\n            \"Action\": [\n                \"logs:AssociateKmsKey\",\n                \"logs:CreateLogGroup\",\n                \"logs:DeleteLogGroup\",\n                \"logs:DeleteRetentionPolicy\",\n                \"logs:DescribeLogGroups\",\n                \"logs:DisassociateKmsKey\",\n                \"logs:ListTagsLogGroup\",\n                \"logs:PutRetentionPolicy\",\n                \"logs:TagLogGroup\",\n                \"logs:UntagLogGroup\"\n            ],\n            \"Resource\": \"*\"\n        }\n    ]\n})\n}\n\n\n```\n\u003c!-- END OF PRE-COMMIT-PIKE DOCS HOOK --\u003e\n\n## Related Projects\n\nCheck out these related projects.\n\n- [terraform-aws-s3](https://github.com/jameswoolfenden/terraform-aws-s3) - S3 buckets\n\n## Help\n\n**Got a question?**\n\nFile a GitHub [issue](https://github.com/JamesWoolfenden/terraform-aws-elastic/issues).\n\n## Contributing\n\n### Bug Reports \u0026 Feature Requests\n\nPlease use the [issue tracker](https://github.com/JamesWoolfenden/terraform-aws-elastic/issues) to report any bugs or file feature requests.\n\n## Copyrights\n\nCopyright © 2021-2022 James Woolfenden\n\n## License\n\n[![License](https://img.shields.io/badge/License-Apache%202.0-blue.svg)](https://opensource.org/licenses/Apache-2.0)\n\nSee [LICENSE](LICENSE) for full details.\n\nLicensed to the Apache Software Foundation (ASF) under one\nor more contributor license agreements. See the NOTICE file\ndistributed with this work for additional information\nregarding copyright ownership. The ASF licenses this file\nto you under the Apache License, Version 2.0 (the\n\"License\"); you may not use this file except in compliance\nwith the License. You may obtain a copy of the License at\n\n\u003chttps://www.apache.org/licenses/LICENSE-2.0\u003e\n\nUnless required by applicable law or agreed to in writing,\nsoftware distributed under the License is distributed on an\n\"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\nKIND, either express or implied. See the License for the\nspecific language governing permissions and limitations\nunder the License.\n\n### Contributors\n\n[![James Woolfenden][jameswoolfenden_avatar]][jameswoolfenden_homepage]\u003cbr/\u003e[James Woolfenden][jameswoolfenden_homepage]\n\n[jameswoolfenden_homepage]: https://github.com/jameswoolfenden\n[jameswoolfenden_avatar]: https://github.com/jameswoolfenden.png?size=150\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fjameswoolfenden%2Fterraform-aws-elastic","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fjameswoolfenden%2Fterraform-aws-elastic","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fjameswoolfenden%2Fterraform-aws-elastic/lists"}