Service Control PoliciesResource Control PoliciesDeclarative PoliciesTag, Backup & AI Opt-Out Policies
Config Rules
CloudWatch Alarms and Event Rules
CloudFormation Guard Rules
Logging & Monitoring Configurations
Backups & DR
Auto Remediation Rules
Conformance Packs
Billing and Cost Management
S3 Bucket Policies
Security Groups & NACLs
IAM Policies
VPC Endpoint Policies
VPC Security Controls
EC2 Security Controls
IAM Security Controls
S3 Security Controls
RDS Security Controls
OpenSearch/Elasticsearch Security Controls
EFS Security Controls
Route53 Security Controls
Amazon DynamoDB & DAX
ECR Security Controls
EMR Security
Lambda SecurityCloudFormation Security
CodeX Security Controls
CloudFront Security
AWS Certificate Manager (ACM) Security
Amazon GuardDuty
Amazon Inspector
AWS Security Hub
AWS Network FirewallRoute53 Resolver Security
Amazon Macie
AWS WAF & Shield
AWS Secrets Manager
AWS Systems Manager
AWS KMS
AWS SSO
Load Balancers & Auto Scaling
RDS Event Subscriptions
AWS Resource Access Manager (RAM)
Amazon ECS
Amazon EKS
Amazon API Gateway
AWS AppConfig
Amazon AppFlow
AWS App Mesh
AWS App Runner
AWS AppSync
Application Auto Scaling
Amazon Athena
AWS Batch
AWS Billing Conductor
AWS Clean Rooms
AWS SNS
AWS SQS
AWS Service Discovery
AWS Step Functions
AWS CloudTrailAWS Config
Amazon EventBridgeAWS CloudWatch
AWS Cognito
Amazon Connect
AWS Glue
AWS Data Pipeline & Data Sync
Amazon Detective
AWS DevOps Guru
Amazon DocumentDB
Amazon ElastiCache
AWS Elastic Beanstalk
Amazon FSx
Amazon MQ
Amazon PrometheusAmazon Cassandra
Amazon FinSpace
AWS Fault Injection Simulator
Amazon GameLift
AWS Global Accelerator
Amazon Grafana
AWS IoT GreenGrass
AWS IoT Services
AWS Ground Station
Amazon IVS (Interactive Live Streams)
Amazon Kinesis
AWS LakeFormation
Amazon Lookout
Amazon Managed Blockchain
AWS Media Services
AWS Managed Apache Airflow
AWS OpsWorksAWS Organizations
Amazon Personalize
Amazon QLDB
Amazon Redshift
Amazon Rekognition
AWS Resource ExplorerAWS Resource Groups
Amazon Lex & Alexa
AWS RoboMaker
Amazon SageMaker
AWS Service Catalog
Amazon SES
AWS SimSpace Weaver
AWS Support App
AWS Transfer
AWS X-Ray
AWS Amplify
AWS Appstream
AWS Audit ManagerAmazon Bedrock
AWS Cloud9
AWS CloudHSM
Amazon Neptune
Amazon QuicksightThis template creates an OpenSearch Service domain with fine-grained access control. The domain is configured with two data nodes and three dedicated master nodes. It has 10 GiB of storage and enables EBS. The access policy allows a specific IAM role to perform all actions on the domain. Advanced security options are enabled with an internal user database and a master user with a specified username and password stored in the Secret created in the template.
© 2026 asecurecloud. All rights reserved.