- Newest
- Most votes
- Most comments
It seems you're experiencing a couple of issues with your OpenSearch setup. Let's address them one by one:
-
Regarding the server not reloading after changing settings and showing "Modifying" or "Applying changes" status for an extended period: This could indicate that the changes you've made are taking longer than expected to propagate through the system. In some cases, complex configuration changes can take a while to apply. However, if this persists for an unusually long time (several hours), it might indicate a problem with the update process. You may want to check the CloudWatch logs for any error messages or contact AWS support if the issue continues.
-
For the authentication issues with your new master account in Kibana: Even though you've created a new master account and mapped the all_access role to it, you're still encountering 403 errors when trying to access certain APIs. This suggests there might be additional permission settings or security configurations that need to be adjusted. Here are a few things to check:
a. Ensure that the all_access role truly has the permissions you expect. Sometimes, there can be discrepancies between what a role name suggests and its actual permissions.
b. Check if there are any fine-grained access control policies in place that might be overriding or limiting the permissions of your master account.
c. Verify that the security settings in your OpenSearch domain are correctly configured to allow these API calls.
d. Make sure that your network policies (if using OpenSearch Serverless) or VPC settings (if using OpenSearch Service) are not restricting access to these APIs.
e. If you're using IAM for authentication, ensure that the IAM policies attached to your user or role have the necessary permissions for these OpenSearch actions.
To resolve these issues, you may need to review your OpenSearch domain's security configuration, check the exact permissions assigned to your master account, and ensure that all necessary access policies are correctly set up. If the problems persist after verifying these settings, it would be advisable to open a support case with AWS for more in-depth troubleshooting.
Sources
Can i use identity center user or permission sets as master user in amazon opensearch? | AWS re:Post
OpenSearch Pipeline Responds with HTTP 401 Error | AWS re:Post
Getting a 401 when trying to access OpenSearch serverless dashboard | AWS re:Post
Troubleshoot access to OpenSearch Serverless dashboard | AWS re:Post
