What permissions are required to grant for read-only workbench on OpenSearch

0

We have a use-case to grant SQL Workbench access generated by OpenSearch dashboard. With the access, people should be able to run only select queries.

Sarath
已提问 9 个月前505 查看次数
1 回答
0

Hi,

What you want to do is to leverage the fine-grained access control to your data provided by OpenSearch: https://docs.aws.amazon.com/opensearch-service/latest/developerguide/fgac.html

For use with Cognito, please, follow the guidance of this specific page: https://docs.aws.amazon.com/opensearch-service/latest/developerguide/fgac-walkthrough-iam.html

You may also want to see this in-depth video detailling how to secure OpenSearch dashboards: https://www.youtube.com/watch?v=TgnHBz4i63M

Best,

Didier

profile pictureAWS
专家
已回答 9 个月前
  • We are already using FGAC for the opensearch domain. When an RO user is trying to execute a query using workbench it is giving us the following error: SHOW tables LIKE %: Service Unavailable, this query is not runnable.

您未登录。 登录 发布回答。

一个好的回答可以清楚地解答问题和提供建设性反馈,并能促进提问者的职业发展。

回答问题的准则