Search code examples
amazon-web-serviceselasticsearchamazon-iamaws-elasticsearch

AWS ElasticSearch console: How to Access to Indices tab in my ES domain

I can't access the indices tab of my ES domain in the AWS ElasticSearch console. Here is what it looks like in the console:

enter image description here

Even though I added my IAM ARN (arn:aws:iam::NNNNNNNNNNNNN:root) to the access policy of the console, I am still getting this error:

/_stats: {
    "error":{
      "root_cause":[
         {
            "type":"security_exception",
            "reason":"no permissions for [indices:monitor/stats] and User [name=arn:aws:iam::NNNNNNNNNNNNN:root, backend_roles=[], requestedTenant=null]"
         }
      ],
      "type":"security_exception",
      "reason":"no permissions for [indices:monitor/stats] and User [name=arn:aws:iam::NNNNNNNNNNNNN:root, backend_roles=[], requestedTenant=null]"
   },
   "status":403
}

Any idea what went wrong? The domain has access control with a master password as well.

Solution

  • It turns out my access policy setting itself was correct but if you have the master user account configured using the basic auth in your domain, the indices and the cluster health don't work. After I switched to ARN based master account, it worked.