# AWS-Hosted OpenSearch Cluster - OpenSearch Dashboards URL (VPC) Unavailable

**URL:** <https://forum.opensearch.org/t/aws-hosted-opensearch-cluster-opensearch-dashboards-url-vpc-unavailable/14622>\
**Category:** Security\
**Tags:** troubleshoot\
**Created:** [June 9, 2023, 6:40pm UTC](https://forum.opensearch.org/t/aws-hosted-opensearch-cluster-opensearch-dashboards-url-vpc-unavailable/14622 "2023-06-09T18:40:10Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![greenbpa](https://avatars.discourse-cdn.com/v4/letter/g/b9e5f3/32.png) [@greenbpa](https://forum.opensearch.org/u/greenbpa)\
**Post date:** [June 9, 2023, 6:40pm UTC](https://forum.opensearch.org/t/aws-hosted-opensearch-cluster-opensearch-dashboards-url-vpc-unavailable/14622/1 "2023-06-09T18:40:10Z")

</div>

**Versions** (relevant - OpenSearch/Dashboard/Server OS/Browser):

AWS-Hosted 2.5

**Describe the issue** :

How to solve access issue?

When browsing to OpenSearch Dashboards URL (VPC), I get no response at all.

 ![image](https://us1.discourse-cdn.com/flex019/uploads/mauve_hedgehog/original/2X/c/c615f3ab55fb225112c5f6a64ffd14c25711ef9c.png)

I am logged in with SAML authenticated user.

Security configuration follows:

```auto
Fine-grained access control

Enabled
Yes

Master user type
Internal user database

Authentication for OpenSearch Dashboards/Kibana

SAML enabled
No

Cognito enabled
No

Region
US East (N. Virginia)

```

Policy:

```auto
{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Principal": {
        "AWS": "*"
      },
      "Action": "es:ESHttp*",
      "Resource": "arn:aws:es:us-east-1:<removed>:domain/opensearchdomai-cunrblwbjaqe/*"
    },
    {
      "Effect": "Allow",
      "Principal": {
        "AWS": "*"
      },
      "Action": [
        "es:Describe*",
        "es:List*",
        "es:ESHttpGet",
        "es:ESHttpHead",
        "es:ESHttpDelete",
        "es:ESHttpPost",
        "es:ESHttpPut"
      ],
      "Resource": "arn:aws:es:us-east-1:<removed>:domain/opensearchdomai-cunrblwbjaqe/*"
    },
    {
      "Effect": "Allow",
      "Principal": {
        "AWS": "*"
      },
      "Action": "es:*",
      "Resource": "arn:aws:es:us-east-1:<removed>:domain/*"
    }
  ]
}

```

**Configuration** :

The cluster looks healthy.

**Relevant Logs or Screenshots** :

---

<div class="post-metadata">

**Author:** ![Eugene7](https://avatars.discourse-cdn.com/v4/letter/e/bbce88/32.png) [@Eugene7](https://forum.opensearch.org/u/Eugene7)\
**Post date:** [June 12, 2023, 10:35am UTC](https://forum.opensearch.org/t/aws-hosted-opensearch-cluster-opensearch-dashboards-url-vpc-unavailable/14622/2 "2023-06-12T10:35:02Z")

</div>

Hi @greenbpa

Could you send the OpenSearch logs, config.yml?  
Have you tried to change the parameter `SAML enabled` to the value `Yes` in the security configuration?