403 Forbidden issue from Lambda accessing Opensearch API

Question

Hello Everyone, I have a lambda function which will be triggered based on Dynamodb events. My lambda will push the document received from the dynamo to Opensearch using its API. The setup worked fine but it started throwing 403 forbidden errors from last 3 days. Please help if anyone faced similar issues. Thanks!

Answer

Hello,

403 Forbidden occurs due to :-
1. index_create_block_exception
2. Issue with Access policy

As you already mentioned that the setup was working fine previously but started throwing 403 forbidden errors from last 3 days. Therefore, it could be due to "index_create_block_exception".

Thus, in-order to fix this issue kindly refer to [documentation here](https://aws.amazon.com/premiumsupport/knowledge-center/opensearch-403-clusterblockexception/) and check :-

* If your cluster is having "[Lack of free storage space]( https://docs.aws.amazon.com/opensearch-service/latest/developerguide/handling-errors.html#troubleshooting-cluster-block)". Lack of free storage space can be easily checked from Opensearch metrics "FreeStorageSpace" for more information on this metric you can refer to [cluster metrics doc](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/managedomains-cloudwatchmetrics.html#managedomains-cloudwatchmetrics-cluster-metrics).

* If the cluster is having high [JVM memory pressure](https://aws.amazon.com/premiumsupport/knowledge-center/opensearch-high-jvm-memory-pressure/).

If your cluster is not having any of the above-mentioned issues. Kindly check the exact error and see if it is similar to `blocked by: [FORBIDDEN/10/cluster create-index blocked (api)]` or if it is due to [Access policy](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/ac.html) issue.

Thank you!

403 Forbidden issue from Lambda accessing Opensearch API

Relevant content