By using AWS re:Post, you agree to the AWS re:Post Terms of Use
AWS re:Postre:Post

OpenSearch Serverlles Collections - AccessDenied

1

Hi All,

I have created a new Open Search Collections and trying to access the dashboard, i am getting the access denied message in my Chorme. Please check and advise.

Collection ARN: arn:aws:aoss:ap-southeast-1:<account_id>:collection/diz61r3safzf6f7cou4c

OpenSearch endpoint: https://diz61r3safzf6f7cou4c.ap-southeast-1.aoss.amazonaws.com

OpenSearch Dashboards URL: https://dashboards.ap-southeast-1.aoss.amazonaws.com/_login/?collectionId=diz61r3safzf6f7cou4c

Access type: Public

*Error: * {"status":403,"request-id":"63ab91b9-9b6f-9285-ad22-71a2f4f4118b","error":{"reason":"Cross Account access is not allowed. AWS is trying to access collection from <account_id> account.","type":"AccessDenied"}}

Topics
AnalyticsDatabase
Tags
Amazon OpenSearch Serverless
Language
English
srini_dk
asked a year ago273 views
1 Answer
1
Accepted Answer

Cross-account access to collections isn't supported. You can't include collections from other accounts in your encryption or data access policies. You might be logged in with a different account in the console.

profile pictureAWS
EXPERT
Roi
answered a year ago
  • AlwaysLearning
    10 months ago

    I am having the same problem. I am logged in as a root user. I used this root user to create the principal IAM user. Is that called cross-account? If so, what should be done instead? I also tried skipping the data access configuration altogether, but encountered the same error.

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions

Relevant content