X-Pack alternative
0
A customer is currently using Elastic Cloud for their ES. They're looking to move to AWS ES, but since we don't support X-Pack, they're asking how they can secure the Kibana instance that's included in the domain.
Topics
asked 5 years ago3 views
1 Answers
0
Accepted Answer
The most common approach is to introduce a Proxy EC2 instance in front of Amazon ES and Kibana as described in the 2nd part of the following blog post: https://aws.amazon.com/blogs/security/how-to-control-access-to-your-amazon-elasticsearch-service-domain/
You can then implement whatever form of authentication/authorization you want on e.g. NGINX. An alternative would be to use API Gateway and AWS Lambda for a server-less approach.
answered 5 years ago
Relevant questions
Importing Filebeat or Metricbeat dashboard on Amazon Elasticserach Kibana
Accepted Answerasked 2 years agoUpgrade ES 6.3 to 6.4 seems stuck
asked 3 years agoUnable to access Kibana REST API
asked a year agoAmazon ES replication and refresh interval
Accepted Answerasked 2 years agoPolicy to restrict command and instance combinations
asked 3 years agoEKS Node Group with RI
Accepted AnswerWorkspaces VPC Move
Accepted Answerasked 2 years agoX-Pack alternative
Accepted Answerasked 5 years agoSecuring Kibana and ElasticSearch without X-Pack-Security plugin
Accepted Answerasked 5 years agoElasticSearch scaling and multi-tenancy considerations
Accepted Answerasked 3 years ago