EC2自动扩展的Amazon Elasticsearch访问策略
[英]Amazon Elasticsearch access policy from EC2 auto-scaling
问题描述
We are using Amazon Elasticsearch and the client which are accessing this service is running in EC2 machine. 
我们正在使用Amazon Elasticsearch，正在访问此服务的客户端正在EC2计算机中运行。 For the security purpose, we are using IP based security so we have given the ec2 machine's IP in the ES security policy. 为了安全起见，我们使用基于IP的安全性，因此我们在ES安全策略中指定了ec2机器的IP。 Now the ec2 infrastructure started using the auto-scaling, so we are in trouble because of the new machine not able to access the ES services. 现在ec2基础架构开始使用自动扩展功能，因此由于新机器无法访问ES服务，我们陷入了麻烦。
How to set the access policy so that new machine able to access the ES service. 如何设置访问策略，以便新机器能够访问ES服务。
we don't want to open the ES service publically. 我们不想公开打开ES服务。
we can't use the accessID/secret mechanism. 我们不能使用accessID / secret机制。
ARN not working for this as it for user access ARN不适用于用户访问
1 个解决方案
解决方案1
0 2018-09-18 11:03:16
Refer these blog posts: 请参阅以下博客文章：
Restrict the AWS ElasticSearch access to an auto scaling group 将AWS ElasticSearch访问权限限制为自动缩放组
https://aws.amazon.com/blogs/database/set-access-control-for-amazon-elasticsearch-service/ https://aws.amazon.com/blogs/database/set-access-control-for-amazon-elasticsearch-service/
声明:本站的技术帖子网页，遵循CC BY-SA 4.0协议，如果您需要转载，请注明本站网址或者原文地址。任何问题请咨询:yoyou2525@163.com.