Using AWS IAM Role to Access OpenSearch

[tigerpeng2001]

Hello,

This is not a report of any issue but a request for help.

I have deployed Graylog node to AWS EKS with OpenSearch. To connect to OpenSearch, I have the user/password added in the elasticsarch host as below

hosts: https://graylog:[email protected]

I am looking for a solution of using the IAM role attached to the container/pod. It seems the aws-sigv4-proxy, https://github.com/awslabs/aws-sigv4-proxy, is a possible solution. There is an attribute graylog.sidecarContainers in this chart. Is there way to use it?

Possibly we can use another sidecar for connecting DocumentDB for replacing MongoDB.

Tiger

[KongZ]

I never use opensearch before but if the opensearch support IAM Role access. You should be able to use IRSA