Access to AWS Opensearch in a VPC
Hi, I created an AWS Opensearch domain in a VPC, but I can't figure out how to access it? When I am clicking on AWS Opensearch dashboard it's not opening and there is a timeout. I fould 2 solutions: EC2 instance with SSH tunnel or NGINX proxy on EC2 instance.
But can I access the domain in a VPC without spinning the EC2 instance at all?
- Más nuevo
- Más votos
- Más comentarios
Hi,
These are the 3 options available to access AWS Opensearch in a VPC
- Use an SSH tunnel
- Use an NGINX proxy
- Use VPN
please see the Knowledge Center article https://aws.amazon.com/premiumsupport/knowledge-center/opensearch-dashboards-vpc-cognito/
Thank you!
Hi,
Do you connect to the VPC with a VPN or is it open to the world. If you dont use a VPN then: Has it been launched into a public subnet with an IGW and if so is the SG open to the outside world on the required ports?
The solutions you provide suggest that the VPC is not publicly accessible or that it is going through a NAT Gateway.
More detail on your VPC setup is required thanks!
Hi, Thank you for your answer. I am using VPC, and if I understand I can use a VPN or EC2 instance to connect to VPN. So in this case I will use just public access. Thank you.
Please review the documentation section: https://docs.aws.amazon.com/opensearch-service/latest/developerguide/vpc.html
once you launched OpenSearch in a VPC you cannot switch to a public domain.
please see, also, the Knowledge Center article https://aws.amazon.com/premiumsupport/knowledge-center/opensearch-dashboards-vpc-cognito/
Contenido relevante
OFICIAL DE AWSActualizada hace un año- OFICIAL DE AWSActualizada hace 3 años
Kibana dashboard is accessible via nginx proxy. How do we push data from an app directly to the ES ? I couldn't sign the http request with AWS credentials nor with EC2 instance profile of the nginx server. Still times out as it is in a VPC. Second - Do we need to do VPC peering with the EKS cluster, if the app runs in EKS kubernetes cluster in order to push data to ES, which is in it's own VPC ?