Created a CloudFormation Stack that provisions an ElasticSearch instance

cloudy_mozdef/cloudformation/mozdef-es.yml

@@ -0,0 +1,42 @@
+AWSTemplateFormatVersion: "2010-09-09"
+Parameters:
+  SubnetIds:
+    Type: "List<AWS::EC2::Subnet::Id>"
+    Description: "Comma-delimited list of subnet IDs within which the ElasticSearch instance will be provisioned."
+  BlockStoreSizeGB:
+    Type: Number
+    Default: 100
+    Description: "The size of the Elastic Block Store to have back ElasticSearch, in GigaBytes."
+Resources:
+   # Not currently supported by cloudformation.
+#  ESServiceLinkedRole:
+#    Type: "AWS::IAM::ServiceLinkedRole"
+#    Properties:
+#      AWSServiceName: "es.amazonaws.com"
+#      Description: "Role to enable Amazon ES to manage your cluster."
+  MozDefElasticSearch:
+    Type: "AWS::Elasticsearch::Domain"
+    Properties:
+      VPCOptions:
+        SubnetIds: !Ref SubnetIds 
+      EBSOptions:
+        EBSEnabled: true
+        VolumeType: "gp2"
+        VolumeSize: !Ref BlockStoreSizeGB
+      ElasticsearchVersion: "5.6"
+      Tags:
+        -
+          Key: "application"
+          Value: "mozdef"
+Outputs:
+  ElasticsearchDomainArn:
+    Description: "ARN of the provisioned ElasticSearch Cluster"
+    Value: !GetAtt MozDefElasticSearch.DomainArn
+    Export:
+      Name: "ElasticsearchDomainArn"
+  ElasticsearchDomainEndpoint:
+    Description: "Endpoint of the provisioned ElasticSearch Cluster"
+    Value: !GetAtt MozDefElasticSearch.DomainEndpoint
+    Export:
+      Name: "ElasticsearchDomainEndpoint"
+