Merge pull request #20 from egarbi/Adds_service_role_conditional_creation

Adds creation of a service IAM role used by default

Author: egarbi

README.md

@@ -37,6 +37,7 @@ CONFIG
 | Name | Description | Type | Default | Required |
 |------|-------------|:----:|:-----:|:-----:|
 | access\_policies | IAM policy document specifying the access policies for the domain. | string | `""` | no |
+| create\_iam\_service\_linked\_role | Control the creation of the default service role, set it to false if you have already created it. | bool | true | no |
 | dedicated\_master | Indicates whether our cluster have dedicated master nodes enabled. | string | `"false"` | no |
 | elasticsearch\_version | Elastic Search Service cluster version number. | string | `"5.5"` | no |
 | encryption\_enabled | Enable encription in Elastic Search. | string | `"false"` | no |

main.tf

@@ -39,6 +39,13 @@ resource "aws_security_group_rule" "egress_all" {
   security_group_id = "${aws_security_group.elasticsearch.id}"
 }
 
+# https://github.com/terraform-providers/terraform-provider-aws/issues/5218
+resource "aws_iam_service_linked_role" "default" {
+  count            = var.create_iam_service_linked_role ? 1 : 0
+  aws_service_name = "es.amazonaws.com"
+  description      = "AWSServiceRoleForAmazonElasticsearchService Service-Linked Role"
+}
+
 resource "aws_elasticsearch_domain" "es" {
   domain_name           = "${var.name}"
   elasticsearch_version = "${var.elasticsearch_version}"
@@ -83,6 +90,10 @@ resource "aws_elasticsearch_domain" "es" {
   tags = {
     Domain = "${var.name}"
   }
+
+  depends_on = [
+    "aws_iam_service_linked_role.default",
+  ]
 }
 
 # Add ALB record on DNS

variables.tf

@@ -15,6 +15,11 @@ variable "vpc_id" {
 }
 
 // Optional
+variable "create_iam_service_linked_role" {
+  description = "Control the creation of the default service role, set it to false if you have already created it"
+  default = true
+}
+
 variable "zone_id" {
   default     = ""
   description = "Route 53 zone id where the DNS record will be created."