aws opensearch describe-domain

From wikieduonline
Jump to navigation Jump to search

https://awscli.amazonaws.com/v2/documentation/api/latest/reference/opensearch/describe-domain.html

aws opensearch describe-domain --domain-name YOUR_DOMAIN_NAME
aws opensearch describe-domain | grep InstanceType
aws opensearch describe-domain | grep -w '"vpc"'
aws opensearch describe-domain | grep -w  CustomEndpoint
{
    "DomainStatus": {
        "DomainId": "0123456789/YOUR_Domain_name-es",
        "DomainName": "YOUR_Domain_name-es",
        "ARN": "arn:aws:es:eu-west-1:0123456789:domain/YOUR_Domain_name-es",
        "Created": true,
        "Deleted": false,
        "Endpoints": {
            "vpc": "vpc-YOUR_Domain_name-es-6vo52fj7bcefql5dzmoapxemb4.eu-west-1.es.amazonaws.com"
        },
        "Processing": false,
        "UpgradeProcessing": false,
        "EngineVersion": "Elasticsearch_7.10",
        "ClusterConfig": {
            "InstanceType": "m6g.xlarge.search",
            "InstanceCount": 6,
            "DedicatedMasterEnabled": true,
            "ZoneAwarenessEnabled": true,
            "ZoneAwarenessConfig": {
                "AvailabilityZoneCount": 3
            },
            "DedicatedMasterType": "m6g.xlarge.search",
            "DedicatedMasterCount": 3,
            "WarmEnabled": false,
            "ColdStorageOptions": {
                "Enabled": false
            }
        },
        "EBSOptions": {
            "EBSEnabled": true,
            "VolumeType": "gp2",
            "VolumeSize": 125
        },
        "AccessPolicies": "{\"Version\":\"2012-10-17\",\"Statement\":[{\"Effect\":\"Allow\",\"Principal\":{\"AWS\":\"*\"},\"Action\":\"es:*\",\"Resource\":\"arn:aws:es:eu-west-1:0123456789:domain/YOUR_Domain_name-es/*\"}]}",
        "SnapshotOptions": {
            "AutomatedSnapshotStartHour": 0
        },
        "VPCOptions": {
            "VPCId": "vpc-0a6a14e1279c692ea",
            "SubnetIds": [
                "subnet-07eff6fe96e14a382",
                "subnet-0a23e0a440dc2c382",
                "subnet-0f27b5ab6f7f23105"
            ],
            "AvailabilityZones": [
                "eu-west-1b",
                "eu-west-1c",
                "eu-west-1a"
            ],
            "SecurityGroupIds": [
                "sg-0f54842da5b8f14f8"
            ]
        },
        "CognitoOptions": {
            "Enabled": false
        },
        "EncryptionAtRestOptions": {
            "Enabled": true,
            "KmsKeyId": "arn:aws:kms:eu-west-1:0123456789:key/6cf91010-56c8-49eb-8331-140f293005ea"
        },
        "NodeToNodeEncryptionOptions": {
            "Enabled": true
        },
        "AdvancedOptions": {
            "override_main_response_version": "false",
            "rest.action.multi.allow_explicit_index": "true"
        },
        "LogPublishingOptions": {
            "AUDIT_LOGS": {
                "CloudWatchLogsLogGroupArn": "arn:aws:logs:eu-west-1:0123456789:log-group:/aws/aes/domains/YOUR_Domain_name-elastic-logs",
                "Enabled": true
            },
            "ES_APPLICATION_LOGS": {
                "CloudWatchLogsLogGroupArn": "arn:aws:logs:eu-west-1:0123456789:log-group:/aws/aes/domains/YOUR_Domain_name-elastic-logs",
                "Enabled": true
            },
            "INDEX_SLOW_LOGS": {
                "CloudWatchLogsLogGroupArn": "arn:aws:logs:eu-west-1:0123456789:log-group:/aws/aes/domains/YOUR_Domain_name-elastic-logs",
                "Enabled": true
            },
            "SEARCH_SLOW_LOGS": {
                "CloudWatchLogsLogGroupArn": "arn:aws:logs:eu-west-1:0123456789:log-group:/aws/aes/domains/YOUR_Domain_name-elastic-logs",
                "Enabled": true
            }
        },
        "ServiceSoftwareOptions": {
            "CurrentVersion": "R20211203-P5",
            "NewVersion": "R20220323-P1",
            "UpdateAvailable": true,
            "Cancellable": false,
            "UpdateStatus": "ELIGIBLE",
            "Description": "A newer release R20220323-P1 is available.",
            "AutomatedUpdateDate": "1970-01-01T04:00:00+04:00",
            "OptionalDeployment": true
        },
        "DomainEndpointOptions": {
            "EnforceHTTPS": true,
            "TLSSecurityPolicy": "Policy-Min-TLS-1-2-2019-07",
            "CustomEndpointEnabled": true,
            "CustomEndpoint": "yourdomain.com",
            "CustomEndpointCertificateArn": "arn:aws:acm:eu-west-1:0123456789:certificate/901dc487-6c9f-XXXba89-e3c57a7e79c5"
        },
        "AdvancedSecurityOptions": {
            "Enabled": true,
            "InternalUserDatabaseEnabled": false,
            "SAMLOptions": {
                "Enabled": true,
                "Idp": {
                    "MetadataContent": "<?xml version=\"1.0\" encoding=\"UTF-8\"?><md:EntityDescriptor xmlns:md=\"urn:oasis:names:tc:SAML:2.0:metadata\" entityID=\"https://portal.sso.us-east-1.amazonaws.com/saml/assertion/OTMwMjk5MjAxNTE1X2lucy0yMmI4ZTA1YzI5Mjg5Yzdi\">\n  <md:IDPSSODescriptor WantAuthnRequestsSigned=\"false\" protocolSupportEnumeration=\"urn:oasis:names:tc:SAML:2.0:protocol\">\n    <md:KeyDescriptor use=\"signing\">\n      <ds:KeyInfo xmlns:ds=\"http://www.w3.org/2000/09/xmldsig#\">\n        <ds:X509Data>\n          <ds:X509Certificate>MIIDAzCCAeugAwIBAgIBATANBgkqhkiG9w0BAQsFADBFMRYwFAYDVQQDDA1hbWF6b25hd3MuY29tMQ0wCwYDVQQLDARJREFTMQ8wDQYDVQQKDAZBbWF6b24xCzAJBgNVBAYTAlVTMB4XDTIxMTExMDE0MTU1MFoXDTI2MTExMDE0MTU1MFowRTEWrIe95MfHVkzKmCM8bKaLkozCOOtH60a3+ajoZ0vV0fNllXFWjz0m5PkxkX4FIEXcjAPCiGM9KIZaDyyDJXMsiuezqVSBNyp8ee+SqFbGWUTsmMCqUWjefctWfmJH1qNC/wk0R5l9tZ4hTYV1nMCsI+IVceZJ9buj/9+gg1mBrc1uECAwEAATANBgkqhkiG9w0BAQsFAAOCAQEAEBK1ilz3hTjdMz7xh0NhjXvDhRMgJQKDir8y5Wo6nYDki4eb95nC50UfjREBan2GzQoG92qGei2A76gpcTC7QALJTNs3Jheb86Rhh7ZhSRqMsie8BJdl6ewHt8VpLDXZET+BIh4fHYq12A2imQekxRxadBO8kuZpzkg12kIKOysPyjZO9T6LAd9lvsl/HspfnjlGVaiSjOH0dDsdDaPKxPwwqJ4bs5E/WDQeVqcm+68adAe7vwbVtcSjGMH9lr9WztqgeHHey9fwjTAwD2Zi5WpwPB9JTmfGfcaGRNSQFS2CBz1jPaXM9OSdj1lURxN6MV8Q3cXeTa2DdRTnIZCOwQ==</ds:X509Certificate>\n        </ds:X509Data>\n      </ds:KeyInfo>\n    </md:KeyDescriptor>\n    <md:SingleLogoutService Binding=\"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST\" Location=\"https://portal.sso.us-east-1.amazonaws.com/saml/logout/OTMwMjk5MjAxNTE1X2lucy0yMmI4ZTA1YzI5Mjg5Yzdi\"/>\n    <md:SingleLogoutService Binding=\"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect\" Location=\"https://portal.sso.us-east-1.amazonaws.com/saml/logout/OTMwMjk5MjAxNTE4ZTA1YzI5Mjg5Yzdi\"/>\n    <md:NameIDFormat/>\n    <md:SingleSignOnService Binding=\"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST\" Location=\"https://portal.sso.us-east-1.amazonaws.com/saml/assertion/OTMwMjk5MjAxMjg5Yzdi\"/>\n    <md:SingleSignOnService Binding=\"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect\" Location=\"https://portal.sso.us-east-1.amazonaws.com/saml/assertion/OTMwMjk5MjAxNTzI5Mjg5Yzdi\"/>\n  </md:IDPSSODescriptor>\n</md:EntityDescriptor>\n",
                    "EntityId": "https://portal.sso.us-east-1.amazonaws.com/saml/assertion/OTMwMjk5MjI5Mjg5Yzdi"
                },
                "SubjectKey": "",
                "RolesKey": "Role",
                "SessionTimeoutMinutes": 60
            },
            "AnonymousAuthEnabled": false
        },
        "AutoTuneOptions": {
            "State": "ENABLED"
        }
    }
}

See also

Advertising: