aws-fargate-opensearch module

> All classes are under active development and subject to non-backward compatible changes or removal in any > future version. These are not subject to the Semantic Versioning model. > This means that while you may use them, you may need to update your source code when upgrading to a newer version of this package.

Language	Package
Python	aws_solutions_constructs.aws_fargate_opensearch
Typescript	@aws-solutions-constructs/aws-fargate-opensearch
Java	software.amazon.awsconstructs.services.fargateopensearch

Overview

This AWS Solutions Construct implements an AWS Fargate service that can write/read to an Amazon OpenSearch Service domain.

Here is a minimal deployable pattern definition:

Typescript

import { Construct } from 'constructs';
import { Stack, StackProps } from 'aws-cdk-lib';
import { FargateToOpenSearch, FargateToOpenSearchProps } from '@aws-solutions-constructs/aws-fargate-opensearch';

const constructProps: FargateToOpenSearchProps = {
  publicApi: true,
  ecrRepositoryArn: "arn:aws:ecr:us-east-1:123456789012:repository/your-ecr-repo",
  openSearchDomainName: 'testdomain',
  // TODO: Ensure the Cognito domain name is globally unique
  cognitoDomainName: 'globallyuniquedomain' + Aws.ACCOUNT_ID
};

new FargateToOpenSearch(this, 'test-construct', constructProps);

Python

from aws_solutions_constructs.aws_fargate_opensearch import FargateToOpenSearch, FargateToOpenSearchProps
from aws_cdk import (
    Stack
)
from constructs import Construct

FargateToOpenSearch(self, 'test_construct',
            public_api=True,
            ecr_repository_arn="arn:aws:ecr:us-east-1:123456789012:repository/your-ecr-repo",
            open_search_domain_name='testdomain',
            # TODO: Ensure the Cognito domain name is globally unique
            cognito_domain_name='globallyuniquedomain' + Aws.ACCOUNT_ID)

Java

import software.constructs.Construct;

import software.amazon.awscdk.Stack;
import software.amazon.awscdk.StackProps;
import software.amazon.awsconstructs.services.fargateopensearch.*;

new FargateToOpenSearch(this, "test_construct", new FargateToOpenSearchProps.Builder()
        .publicApi(true)
        .ecrRepositoryArn("arn:aws:ecr:us-east-1:123456789012:repository/your-ecr-repo"
        .openSearchDomainName("testdomain")
        // TODO: Ensure the Cognito domain name is globally unique
        .cognitoDomainName("globallyuniquedomain" + Aws.ACCOUNT_ID)
        .build());

Pattern Construct Props

Pattern Properties

Default settings

Out of the box implementation of the Construct without any override will set the following defaults:

AWS Fargate Service

• Sets up an AWS Fargate service

  • Uses the existing service if provided

  • Creates a new service if none provided

    • Service will run in isolated subnets if available, then private subnets if available and finally public subnets

  • Adds environment variables to the container with the OpenSearch Service domain endpoint

  • Add permissions to the container IAM role allowing it to write/read to the OpenSearch Service domain endpoint

Amazon Cognito

• Set password policy for User Pools
• Enforce the advanced security mode for User Pools

Amazon OpenSearch Service

• Deploy best practices CloudWatch Alarms for the OpenSearch Service domain
• Secure the OpenSearch Service dashboard access with Cognito User Pools
• Enable server-side encryption for OpenSearch Service domain using AWS managed KMS Key
• Enable node-to-node encryption for the OpenSearch Service domain
• Configure the cluster for the OpenSearch Service domain

Architecture

© Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.