How can i disable private tenant in AWS Elasticsearch Service?

I’ve been looking all over but can’t seem to find a way to disable the private tenant in a fine-grained access control enabled AWS Elasticsearch Service cluster via the DEV TOOLS.

opendistro_security.multitenancy.tenants.enable_private

https://docs.aws.amazon.com/elasticsearch-service/latest/developerguide/aes-supported-es-operations.html

:wave: Hi West - welcome!

Let me ask a clarifying question: You’re trying to change the opendistro_security.multitenancy.tenants.enable_private setting from within dev tools in Kibana itself in Amazon ES (not self managed Open Distro)?

Hi, yes that’s correct, if it’s even possible. I’m not entirely sure AWS’s Opendistro implementation allows for this option to be altered.

I’ll check with the Open Distro Kibana engineering team, but I’m pretty sure it can’t be altered at run time as it’s in the config.yml which means it’s off limits to Amazon ES.

Greatly appreciated thank you.

1 Like