Elasticsearch Module for SRE's

Features by Default

• Encryption at rest
• Node to Node Encryption
• Zone Awareness
• Logs
• HTTPS Enforce
• TLS 1.2 by default
• Access Policy Creation

Variables

Variable	Default	Required	Type	Additional Info
name	NA	yes	string
vpc	NA	yes	string	VPC ID
subnets	NA	yes	list	Subnet ID's
instance_type	NA	yes	string
instance_count	NA	yes	number
elasticsearch_version	OpenSearch_1.0	no	string
zone_awareness	true	no	bool
cidrs_to_allow	[]	no	list
security_groups_to_allow	[]	no	list
az_count	null	no	number	Allowed 2 or 3, default is length of subnets
kms_key	""	no	string	If you don't inform, a new will be created
cloudwatch_rotation	1	no	number	Cloudwatch Expiring Logs
access_policy	null	no	string
custom_domain	null	no	string
enforce_https	true	no	bool
custom_domain_acm_certificate	null	no	string
tls_security_policy	Policy-Min-TLS-1-2-2019-07	no	string
enforce_https	true	no	bool
tags	{}	no	map(any)	Tags to resources

Outputs

Variable	Value
domain	aws_elasticsearch_domain.main
security_group	aws_security_group.main
log_group_errors	aws_cloudwatch_log_group.errors
log_group_search	aws_cloudwatch_log_group.search
log_group_index	aws_cloudwatch_log_group.index
kms	aws_kms_key.main

Usage

module "dummy" {
    source = "github.com/production-ready-toolkit/aws-sre-elasticsearch-cluster"

    name                    = "dummy-elastic"
    elasticsearch_version   = "OpenSearch_1.0"
    instance_type           = "t3.small.elasticsearch"
    instance_count          = 3

    vpc         = "vpc-ba8b92c1"

    subnets     = [
        "subnet-29954875",
        "subnet-c832eeaf",
        "subnet-23a9760d"
    ]

    tags        = {
        "environment" = "production"
    }
}

Examples

Todo

• ...