1

I need to access a AWS ElasticSearch (AES) domain, which is inside a VPC, from the internet, so that I can do read/write testing from a local machine. Ultimately, the code will run on an EC2 instance inside the VPC, but for now I need direct access. It would be ideal if the same code would run both outside and inside the VPC (as we do with DynamoDB), but we may not be that lucky.

Thus, I want to create a public endpoint to access the AES domain that is inside the VPC. Since I have the AES internal endpoint name and the ENI connected to it, I thought I could just connect an Elastic IP address to the ENI, but that's not allowed -- I assume its because the internal IP address may change.

Alternatively, it would make sense that I could map a route in the route table from the IGW (Internet Gateway) to the internal address. But that would again be connected to the internal IP address, and thats bad.

I expect I could use Route53 to map an external facing domain name in to it. But that seems like overkill.

Is there way to map an address from the internet in to the AES domain name?

Hephaestus
  • 4,337
  • 5
  • 35
  • 48

1 Answers1

1

Is there way to map an address from the internet in to the AES domain name?

Sadly, there is no direct way. You have to setup a VPN connection between your home and your VPC, or some other type of proxy server. However, for testing and development purposes, usually this is done using SSH tunnel is more then sufficient. Setting up the SSH tunnel is explain in Testing VPC Domains of AWS Docs.

There are also numerous other manuals and tutorials on how to do it, e.g.:

Marcin
  • 215,873
  • 14
  • 235
  • 294
  • Thank you for the response. I've tried the SSH tunnel but keep running into the HTTPS problem. I am testing options. – Hephaestus Oct 28 '20 at 06:24
  • We ended up using a VPC for testing. We are finding that writes with Java are working fine. But we are still locked out of Kibana, because we are using a Master IAM ARN and Kibana requires a username/password. Sigh. This will need to be another SO question. – Hephaestus Oct 31 '20 at 05:33