1. Open the AWS Management Console and navigate to the Amazon Elasticsearch Service dashboard.
2. Select the Elasticsearch domain that you want to update.
3. Click on the “Actions” button and select “Upgrade Elasticsearch Version”.
4. In the “Upgrade Elasticsearch Version” dialog box, select the latest version of Elasticsearch that you want to upgrade to.
5. Choose the “Schedule Upgrade” option to schedule the upgrade for a later time or choose the “Upgrade Immediately” option to upgrade Elasticsearch immediately.
6. Review the upgrade details and click on the “Confirm” button to start the upgrade process.
7. Wait for the upgrade process to complete. The Elasticsearch domain will be unavailable during the upgrade process.
8. Once the upgrade process is complete, verify that the Elasticsearch domain is using the latest version of Elasticsearch.

​

1. Open the AWS CLI on your local machine.
2. Run the following command to get the list of Elasticsearch domains in your AWS account:

aws es list-domain-names

3. Identify the Elasticsearch domain that needs to be updated to the latest service software.
4. Run the following command to get the details of the Elasticsearch domain:

aws es describe-elasticsearch-domain --domain-name <domain-name>

5. Check the value of the ElasticsearchVersion parameter in the output. If it is not the latest version, proceed to the next step.
6. Run the following command to update the Elasticsearch domain to the latest service software:

aws es update-elasticsearch-domain-config --domain-name <domain-name> --elasticsearch-version "7.10"

7. Wait for the update to complete. You can check the status of the update by running the following command:

aws es describe-elasticsearch-domain --domain-name <domain-name>

8. Verify that the Elasticsearch domain is now using the latest service software by checking the value of the ElasticsearchVersion parameter in the output of the describe-elasticsearch-domain command.

1. Import the necessary Python libraries: boto3 and json.

import boto3
import json

2. Create an AWS ElasticSearch client using boto3.

client = boto3.client('es')

3. Get the list of all Elasticsearch domains in the account using the list_domain_names() method.

domains = client.list_domain_names()['DomainNames']

4. Loop through each domain and check if the domain is using the latest service software version. You can get the latest Elasticsearch version using the describe_elasticsearch_version() method.

for domain in domains:
    domain_name = domain['DomainName']
    response = client.describe_elasticsearch_version(
        DomainName=domain_name,
        )
    latest_version = response['ElasticsearchVersions'][0]
    domain_info = client.describe_elasticsearch_domain(
        DomainName=domain_name
        )
    current_version = domain_info['DomainStatus']['ElasticsearchVersion']
    if current_version != latest_version:
        print(f"Updating {domain_name} from {current_version} to {latest_version}")
        response = client.update_elasticsearch_domain_config(
            DomainName=domain_name,
            ElasticsearchClusterConfig={
                'ElasticsearchVersion': latest_version,
            }
        )

5. Finally, run the Python script to remediate the misconfiguration in AWS ElasticSearch domains.

resource "aws_elasticsearch_domain" "this" {
  domain_name    = "ES_DOMAIN_NAME"        # replace with your domain name
  engine_version = "LATEST_COMPATIBLE_VERSION" # replace with the target version from `get-compatible-elasticsearch-versions`

  # include the rest of your existing settings here so the domain is recreated identically:
  # cluster_config { ... }
  # ebs_options   { ... }
  # vpc_options   { ... }
  # snapshot_options { ... }
  # encrypt_at_rest { ... }
  # node_to_node_encryption { ... }
  # etc.
}

• Set LATEST_COMPATIBLE_VERSION to the exact version you selected from aws es get-compatible-elasticsearch-versions (the same value you would pass to --target-version in aws es upgrade-elasticsearch-domain).
• Important: In the current AWS provider, changing engine_version on aws_elasticsearch_domain forces resource replacement (destroy and recreate the domain). This is not reversible and can cause downtime and/or data loss if you are not also managing snapshots and data restore separately. The warnings from the CLI remediation still apply: review breaking changes, ensure recent snapshots, and expect a potentially long upgrade window.

• terraform plan should show a -/+ change for aws_elasticsearch_domain.this with engine_version changing from the current version to LATEST_COMPATIBLE_VERSION, indicating the domain will be replaced with the new service software version.