Amazon Elasticsearch Service Simplifies User Authentication and Access for Kibana with Amazon Cognito
Amazon Elasticsearch Service now integrates with Amazon Cognito to provide user-level authentication for Kibana, without the need to configure and manage a proxy server. With today’s release, you can sign-in to the service through enterprise identity providers such as Microsoft Active Directory using SAML 2.0, and through social identity providers such as Google, Facebook, and Amazon. You can also set up a secure, scalable, and simplified sign-up experience using Amazon Cognito User Pools. Once you sign-in, Amazon Cognito establishes a session using the appropriate AWS Identity and Access Management (IAM) role, which provides access to the Amazon Elasticsearch Service domain.
All Amazon Elasticsearch Service domains include Kibana, an open-source data visualization and exploration tool used for log and time series analytics including application monitoring, clickstream analytics, and more. Kibana tightly integrates with Elasticsearch and is the default choice for Elasticsearch data visualizations.
Kibana authentication is supported on all domains that use Elasticsearch 5.1 or greater and is available in 15 regions globally: US East (N. Virginia, Ohio), US West (Oregon, N. California), Canada (Central), South America (Sao Paulo), EU (Ireland, London, Frankfurt, Paris), and Asia Pacific (Singapore, Sydney, Tokyo, Seoul, Mumbai). To learn more about today’s release, see the Amazon Elasticsearch Service Developer Guide.