Use AWS authentication for Amazon Open Search Service (AOSS)

Question

We have an AOSS cluster and I'd like to use regular AWS console authentication to authenticate users. I've reviewed (and followed much of) the following:

• Configuring Amazon Cognito authentication for OpenSearch Dashboards
• How to enable secure access to Kibana using AWS Single Sign-On
• Configure SAML single sign-on for Kibana with AD FS on Amazon Elasticsearch Service

They all seem to use third-party SAML/AD-like services or to create/manage users separately from the AWS users/groups we've already set up.

Is there a way to, in essence, use AWS console authentication for AOSS access?

Many thanks!

Answer 1

Official documentation can be found here: https://docs.aws.amazon.com/opensearch-service/latest/developerguide/ac.html

Creating policies should work as usual.