带有 Cognito 的 AWS Elasticsearch Kibana - 缺少角色 [英] AWS Elasticsearch Kibana with Cognito - Missing role

问题描述

按照本文为 AWS Elasticsearch 设置 Cognito 身份验证.

?

解决方案

如果您已启用 细粒度访问控制与您的 Elasticsearch 域，Amazon Cognito 身份池中假定的角色之一必须与您为 主用户指定的 IAM 角色匹配.考虑到您至少有两个现有的 IAM 角色，一个用于主用户，另一个用于更多受限用户，这是guide 可能对您有所帮助.

或者，您可以配置与 Cognito 身份验证角色 ARN.

Following this article to set up Cognito auth for AWS Elasticsearch.

https://aws.amazon.com/blogs/database/get-started-with-amazon-elasticsearch-service-use-amazon-cognito-for-kibana-access-control/

Getting an error:

Open Distro for Elasticsearch

Missing Role

No roles available for this user, please contact your system administrator.

Anybody knows why I could get it?

解决方案

If you have enabled Fine-Grained Access Control with your Elasticsearch domain, one of the assumed roles from the Amazon Cognito identity pool must match the IAM role that you specified for the Master User. Considering you have at least two existing IAM roles, one for the Master User and one for more limited users, this guide may help you.

Alternatively you can configure the master user role same as Cognito Authenticated role ARN.

这篇关于带有 Cognito 的 AWS Elasticsearch Kibana - 缺少角色的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！