Amazon Elasticsearch-无法访问Kibana

Question

I have launched Elasticsearch in a Public Subnet, still, I am not able to access the Kibana console from my browser. I am not able to understand the issue, I have configured the Security Group correctly. Please refer the image below for my setup :

What other setting needs to be made to access Elasticsearch over the internet in a VPC.

Answer 1

If you place your Elastic Search Cluster inside a VPC, whether inside a public or private subnet, the Kibana URL which is generated is internal to the VPC. Which means you cannot access it outside the VPC. You can access it through an EC2 instance inside the VPC ie you will have to create a windows EC2 instance inside the same VPC as Kibana and then you will be able to access the Kibana dashboard through the browser of that instance.

Answer 2

You need to update access policy of the cluster -> ELK -> domain -> Modify access policy

Select a template from the drop-down or update it manually and your IP

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Principal": {
        "AWS": "*"
      },
      "Action": "es:*",
      "Resource": "arn:aws:es:us-west-2:**youraccountnumber***:domain/dmainname/*",
      "Condition": {
        "IpAddress": {
          "aws:SourceIp": [
            "202.your_public_ip_adress/32"
          ]
        }
      }
    }
  ]
}

Or further you can share the browser output which should be something like the user is allowed?

How u create your ELK cluster there is two option?