Elastic Search Policy Update Fails

We're getting the following error when trying to save an existing policy. Only a minor change (date) was made in this policy (IDs/IPs removed) that is causing an error. We were originally trying to update the IP set.

Any thoughts? Any insight would be appreciated.

UpdateElasticsearchDomainConfig: {"message":"Error setting policy: [{"Version":"2012-10-18","Statement":[{"Sid":"AllowKubernetes","Effect":"Allow","Principal":{"AWS":"arn:aws:iam::REMOVED:role/REMOVED"},"Action":"es:","Resource":"arn:aws:es:us-east-1:REMOVED:domain/REMOVED/"},{"Sid":"","Effect":"Allow","Principal":{"AWS":""},"Action":"es:","Resource":"arn:aws:es:us-east-1:REMOVED:domain/REMOVED/*","Condition":{"IpAddress":{"aws:SourceIp":[REMOVED]}}}]}]"}

Edited by: bd3 on Jan 25, 2019 3:56 PM