By using AWS re:Post, you agree to the AWS re:Post Terms of Use
AWS re:Postre:Post

What permissions are required to grant for read-only workbench on OpenSearch

0

We have a use-case to grant SQL Workbench access generated by OpenSearch dashboard. With the access, people should be able to run only select queries.

Topics
ServerlessAnalyticsSecurity, Identity, & Compliance
Tags
Amazon OpenSearch ServiceAmazon Cognito User Pools
Language
English
Sarath
asked 9 months ago487 views
1 Answer
0

Hi,

What you want to do is to leverage the fine-grained access control to your data provided by OpenSearch: https://docs.aws.amazon.com/opensearch-service/latest/developerguide/fgac.html

For use with Cognito, please, follow the guidance of this specific page: https://docs.aws.amazon.com/opensearch-service/latest/developerguide/fgac-walkthrough-iam.html

You may also want to see this in-depth video detailling how to secure OpenSearch dashboards: https://www.youtube.com/watch?v=TgnHBz4i63M

Best,

Didier

profile pictureAWS
EXPERT
Didier_Durand
answered 9 months ago
  • Sarath
    9 months ago

    We are already using FGAC for the opensearch domain. When an RO user is trying to execute a query using workbench it is giving us the following error: SHOW tables LIKE %: Service Unavailable, this query is not runnable.

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions

Relevant content