state/elasticsearch: service-linked role missing

[andreaswittig]

When launching a stack based on state/elasticsearch the following error occurs.

CREATE_FAILED | AWS::Elasticsearch::Domain | ElasticsearchDomain | Before you can proceed, you must enable a service-linked role to give Amazon ES permissions to access your VPC. (Service: AWSElasticsearch; Status Code: 400; Error Code: ValidationException; Request ID: 1a439bb6-a056-11e8-bd06-4590933de7d2)
-- | -- | -- | --

Seems like we are missing a service-linked role. Is it possible to create the service-linked role via CloudFormation? If not, we should add a note to the documentation.

[andreaswittig]

It's already mentioned in the documentation. :)