Access Control And OpenSearch Service Security

Abstract

• For the quick start of building opensearch, we can put the opensearch in public network and control access by using basic authentication and domain access policy from Fine-grain access controller. But this is a Critical alert from AWS security standard.


• [OpenSearch.2] OpenSearch domains should be in a VPC


• In this blog, I will walk through create opensearch domain, put it in VPC and how to use NGINX proxy to access OpenSearch Dashboards from outside a VPC that's using Amazon …

access access control aws cdk control opensearch security service