elasticsearch 用于提供弹性搜索的AWS云形成模板

我想通过cloudformation模板配置ES域

我有一个将使用此ES域的服务，因此无论何时将该服务部署到ECS，我都希望首先创建一个ES域，并在我的服务中使用ES端点

这个模板有用吗

另外，如何通过模板设置SSM中新创建的ES端点

{
  "AWSTemplateFormatVersion": "2010-09-09",
  "Resources": {
    "taskRole": {
      "Type": "AWS::IAM::Role",
      "Properties": {
        "AssumeRolePolicyDocument": {
          "Version": "2012-10-17",
          "Statement": [
            {
              "Sid": "",
              "Effect": "Allow",
              "Principal": {
                "Service": "ecs-tasks.amazonaws.com"
              },
              "Action": "sts:AssumeRole"
            }
          ]
        },
        "Path": "/",
        "Policies": [
          {
            "PolicyName": "taskRole",
            "PolicyDocument": {
              "Statement": [
                {
                  "Effect": "Allow",
                  "Action": [
                    "ssm:GetParametersByPath",
                    "ssm:GetParameter"
                  ],
                  "Resource": "arn:aws:ssm:*:*:parameter/*"
                }
              ]
            }
          }
        ]

      }
    },
    "ElasticsearchDomain": {
      "Type": "AWS::Elasticsearch::Domain",
      "Properties": {
        "DomainName": "Test-ES-Domain",
        "ElasticsearchClusterConfig": {
          "DedicatedMasterEnabled": "true",
          "InstanceCount": "2",
          "ZoneAwarenessEnabled": "true",
          "InstanceType": "m3.medium.elasticsearch",
          "DedicatedMasterType": "m3.medium.elasticsearch",
          "DedicatedMasterCount": "3"
        },
        "EBSOptions": {
          "EBSEnabled": true,
          "Iops": 0,
          "VolumeSize": 20,
          "VolumeType": "gp2"
        },
        "SnapshotOptions": {
          "AutomatedSnapshotStartHour": "0"
        },
        "AccessPolicies": {
          "Version": "2012-10-17",
          "Statement": [
            {
              "Effect": "Allow",
              "Principal": {
                "AWS": "arn:aws:iam::123456789012:user/es-user"
              },
              "Action": "es:*",
              "Resource": "arn:aws:es:us-east-1:123456789012:domain/test/*"
            }
          ]
        },
        "AdvancedOptions": {
          "rest.action.multi.allow_explicit_index": "true"
        }
      }
    }
  },
  "Outputs": {
    "serviceRole": {
      "Description": "Task role with permission to read configurations from AWS parameter store",
      "Value": { "Fn::GetAtt": [ "taskRole", "Arn" ] }
    }
  }
}

---

以下是我的云信息模板：

那你就可以随便看看，把它们分开

对于您所问的SSM部分，我必须在这一部分上进行一些挖掘：P