Dynamic cognito_options inner block to avoid permission problems in AWS China

[brdasilva]

what

• Amazon Cognito authentication for Kibana is not supported on AWS China.
• Therefore we need to have a way to avoid setting the cognito options inner block on the aws_elasticsearch_domain terraform resource.

why

• When we try to run this module on AWS China we always get the following error:

Error: Error creating ElasticSearch domain: DisabledOperationException: You don’t have permissions to integrate with Cognito. Contact your admin if you need help.
on .terraform/modules/elasticsearch/terraform-aws-elasticsearch-0.18.0/main.tf line 122, in resource 
"aws_elasticsearch_domain" "default": 122: resource "aws_elasticsearch_domain" "default" {

Even though we tried to set the correct IAM roles (see references below) and permissions the error still occurs.

references

• https://docs.amazonaws.cn/en_us/aws/latest/userguide/elasticsearch.html
• https://docs.aws.amazon.com/elasticsearch-service/latest/developerguide/es-cognito-auth.html#es-cognito-auth-config

[osterman]

/test all