AWS-Hosted OpenSearch Cluster - OpenSearch Dashboards URL (VPC) Unavailable

Security
1

Versions (relevant - OpenSearch/Dashboard/Server OS/Browser):

AWS-Hosted 2.5

Describe the issue:

How to solve access issue?

When browsing to OpenSearch Dashboards URL (VPC), I get no response at all.

image
image1795×401 43.4 KB

I am logged in with SAML authenticated user.

Security configuration follows:

Fine-grained access control

Enabled
Yes

Master user type
Internal user database

Authentication for OpenSearch Dashboards/Kibana

SAML enabled
No

Cognito enabled
No

Region
US East (N. Virginia)

Policy:

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Principal": {
        "AWS": "*"
      },
      "Action": "es:ESHttp*",
      "Resource": "arn:aws:es:us-east-1:<removed>:domain/opensearchdomai-cunrblwbjaqe/*"
    },
    {
      "Effect": "Allow",
      "Principal": {
        "AWS": "*"
      },
      "Action": [
        "es:Describe*",
        "es:List*",
        "es:ESHttpGet",
        "es:ESHttpHead",
        "es:ESHttpDelete",
        "es:ESHttpPost",
        "es:ESHttpPut"
      ],
      "Resource": "arn:aws:es:us-east-1:<removed>:domain/opensearchdomai-cunrblwbjaqe/*"
    },
    {
      "Effect": "Allow",
      "Principal": {
        "AWS": "*"
      },
      "Action": "es:*",
      "Resource": "arn:aws:es:us-east-1:<removed>:domain/*"
    }
  ]
}

Configuration:

The cluster looks healthy.

Relevant Logs or Screenshots:

2

Hi @greenbpa

Could you send the OpenSearch logs, config.yml?
Have you tried to change the parameter SAML enabled to the value Yes in the security configuration?