AWS Elasticsearch & VPC - configuring network access from my fixed IP

Question

I am unable to access AWS Elasticsearch Kibana with a browser.

I have set up an Elasticsearch instance within my VPC exactly as described here;

https://aws.amazon.com/blogs/aws/amazon-elasticsearch-service-now-supports-vpc/

I used the default IAM access policy template which is basicaly all current IAM profiles (*)

My EC2 webapp (xenforo forum) is happily connected and chugging away.

I would like to access my elasticsearch domain kibana endpoint via browser from my home PC.

The security group I attached to the cluster configuration includes a rule to allow ALL TCP inbound from my home broadband fixed IP address.

I log into the AWS console, click the Kibana link from the elasticsearch domain overview and... nothing, times out.

I have read everything I can find on the matter. No joy - except perhaps I should be signing my https requests as well which seems crazy complicated and my understanding is that IP access should be configurable with security groups?

Can anyone clarify?

Answer 1

to access Kibana, it seems the only way is pass proper header with your requests to.

We solved it by using https://github.com/abutaha/aws-es-proxy - its not niciest, but works for us.

• requires to have aws-cli installed
• requires to do bit of setup, but works well afterwards

hope it helps