init commit of elasticsearch require https

aws/resource_aws_elasticsearch_domain.go

@@ -86,6 +86,11 @@ func resourceAwsElasticSearchDomain() *schema.Resource {
 				Type:     schema.TypeString,
 				Computed: true,
 			},
+			"require_https": {
+				Type:     schema.TypeBool,
+				Optional: true,
+				Default:  false,
+			},
 			"endpoint": {
 				Type:     schema.TypeString,
 				Computed: true,
@@ -361,6 +366,12 @@ func resourceAwsElasticSearchDomainCreate(d *schema.ResourceData, meta interface
 		input.AdvancedOptions = stringMapToPointers(v.(map[string]interface{}))
 	}
 
+	if d.Get("require_https").(bool) {
+		input.DomainEndpointOptions = &elasticsearch.DomainEndpointOptions{
+			EnforceHTTPS: aws.Bool(true),
+		}
+	}
+
 	if v, ok := d.GetOk("ebs_options"); ok {
 		options := v.([]interface{})
 
@@ -642,6 +653,10 @@ func resourceAwsElasticSearchDomainRead(d *schema.ResourceData, meta interface{}
 		d.Set("log_publishing_options", m)
 	}
 
+	if ds.DomainEndpointOptions != nil && ds.DomainEndpointOptions.EnforceHTTPS {
+		d.Set("require_https", true)
+	}
+
 	d.Set("arn", ds.ARN)
 
 	listOut, err := conn.ListTags(&elasticsearch.ListTagsInput{
@@ -684,6 +699,12 @@ func resourceAwsElasticSearchDomainUpdate(d *schema.ResourceData, meta interface
 		input.AdvancedOptions = stringMapToPointers(d.Get("advanced_options").(map[string]interface{}))
 	}
 
+	if d.HasChange("require_https") {
+		input.SetDomainEndpointOptions(&elasticsearch.DomainEndpointOptions{
+			EnforceHTTPS: aws.Bool(d.Get("require_https").(string)),
+		})
+	}
+
 	if d.HasChange("ebs_options") || d.HasChange("cluster_config") {
 		options := d.Get("ebs_options").([]interface{})
 

website/docs/r/elasticsearch_domain.html.markdown

@@ -223,6 +223,7 @@ The following arguments are supported:
 * `vpc_options` - (Optional) VPC related options, see below. Adding or removing this configuration forces a new resource ([documentation](https://docs.aws.amazon.com/elasticsearch-service/latest/developerguide/es-vpc.html#es-vpc-limitations)).
 * `log_publishing_options` - (Optional) Options for publishing slow logs to CloudWatch Logs.
 * `elasticsearch_version` - (Optional) The version of Elasticsearch to deploy. Defaults to `1.5`
+* `require_https` - (Optional) Whether the Elasticsearch domain requires HTTPS to connect
 * `tags` - (Optional) A mapping of tags to assign to the resource
 
 **ebs_options** supports the following attributes: