Posted On: Apr 2, 2018
HAQM Elasticsearch Service now integrates with HAQM Cognito to provide user-level authentication for Kibana, without the need to configure and manage a proxy server. With today’s release, you can sign-in to the service through enterprise identity providers such as Microsoft Active Directory using SAML 2.0, and through social identity providers such as Google, Facebook, and HAQM. You can also set up a secure, scalable, and simplified sign-up experience using HAQM Cognito User Pools. Once you sign-in, HAQM Cognito establishes a session using the appropriate AWS Identity and Access Management (IAM) role, which provides access to the HAQM Elasticsearch Service domain.
All HAQM Elasticsearch Service domains include Kibana, an open-source data visualization and exploration tool used for log and time series analytics including application monitoring, clickstream analytics, and more. Kibana tightly integrates with Elasticsearch and is the default choice for Elasticsearch data visualizations.
Kibana authentication is supported on all domains that use Elasticsearch 5.1 or greater and is available in 15 regions globally: US East (N. Virginia, Ohio), US West (Oregon, N. California), Canada (Central), South America (Sao Paulo), EU (Ireland, London, Frankfurt, Paris), and Asia Pacific (Singapore, Sydney, Tokyo, Seoul, Mumbai). To learn more about today’s release, see the HAQM Elasticsearch Service Developer Guide.