es-aws-iam-http-connector

This http connector extends Elasticsearch-js client to allow you to use it against your AWS ES domains that are secured via AWS IAM-based access policies.

This allows you to lock down your AWS ES domain - no need for IP-based access policies, and very granular security.

Example

var es = require('elasticsearch');
var AWS = require('aws-sdk');

var client = new es.Client({
  host: "https://your-aws-es-domain",
  connectionClass: require('es-aws-iam-http-connector'),
  aws: {
    region: 'eu-west-1',
    credentials: new AWS.EnvironmentCredentials('AWS')
  }
});

Credentials

Local file

Stored in your profile's ~/.aws/credentials file:

aws: {
  credentials: new AWS.SharedIniFileCredentials({profile:'default'})
}

From environment

For example, IAM instance profiles or AWS Lambda:

aws: {
  credentials: new AWS.EnvironmentCredentials('AWS')
}