Aws-cdk: How to set authentication for elasticsearch

[vjindalradialtheory]

How we can set authentication for elasticsearch ?

[cmckni3]

Appears that Cognito authentication is not supported by @aws-cdk/aws-elasticsearch yet. I believe an approach may be to create a custom resource that handles it onCreate.

In CloudFormation it looks like this:

CognitoOptions:
  Enabled: boolean;
  UserPoolId: string;
  IdentityPoolId: string;
  RoleArn: string;

[SomayaB]

Hi @vjindalradialtheory, like @cmckni3 mentioned, cognito for elasticsearch is not yet supported by cloudformation which means it isn't supported by the CDK. So in the meantime the best way is to follow the above steps. Thanks @cmckni3! 👍

Closing for now, but feel free to reopen.

[steffeng]

elasticsearch is not yet supported by cloudformation

Now it is https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-elasticsearch-domain-cognitooptions.html

[cmckni3]

Awesome!

I got the API and CFN docs mixed up. Example I posted came from AWS CLI.

Can use the AWS CDK escape hatch until official CDK support.

Thanks @steffeng!

[iliapolo]

We are actively working on an Elasticsearch L2 which will also include cognito authentication. In any case, The L1 also supports cognito options now:

https://docs.aws.amazon.com/cdk/api/latest/docs/@aws-cdk_aws-elasticsearch.CfnDomain.CognitoOptionsProperty.html