- Newest
- Most votes
- Most comments
I understand your frustration with the OpenSearch Service issues you encountered. Let me address the key points:
When creating an OpenSearch Service domain through the AWS console, permission errors can occur but may not always be clearly displayed. This is particularly common when setting up VPC access, where you need specific permissions like ec2:DescribeVpcs, ec2:DescribeSubnets, and ec2:DescribeSecurityGroups. Without these permissions, the console may fail with an "unauthorized operation" error or, in some cases, appear to be processing without clear error messages.
For OpenSearch Service, proper IAM permissions are critical. The fact that your process worked after granting admin access suggests this was indeed a permissions issue. OpenSearch Service requires specific IAM roles and permissions to function properly, especially when integrating with other AWS services.
Regarding the infinite loop and lack of clear error messages - this can happen when the service is attempting to perform operations but lacks the necessary permissions. Instead of failing immediately, it might continue retrying or waiting for resources that cannot be accessed.
For the billing concern, OpenSearch Service charges are based on the resources provisioned, not necessarily on successful operations. Even if your knowledge base creation was unsuccessful, the underlying infrastructure was likely provisioned and running during those 4 hours, resulting in the charges.
To troubleshoot similar issues in the future:
- Ensure your IAM user/role has all required permissions before starting
- Check CloudWatch logs for any error messages
- Consider using AWS CLI which sometimes provides more detailed error messages than the console
- For billing concerns, you can contact AWS Support directly as they may be able to provide a one-time courtesy credit for learning purposes
Amazon OpenSearch Service is a powerful but complex service that requires careful configuration of permissions and networking to work properly.
Sources
Troubleshooting Amazon OpenSearch Service - Amazon OpenSearch Service
Open Source Search Engine - Amazon OpenSearch Service FAQs - AWS
answered a year ago
Relevant content
asked 4 years ago
