Currently with given solution, OpenSearch cluster is getting provisioning in public subnet which makes complete cluster public and accessible even without NGINX proxy instance. For VPC based OpenSearch cluster, it should be provisioned in private cluster with security group allow port 80 & 443 inbound connection from NGINX EC2 security group.
Fixes #
By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
Currently with given solution, OpenSearch cluster is getting provisioning in public subnet which makes complete cluster public and accessible even without NGINX proxy instance. For VPC based OpenSearch cluster, it should be provisioned in private cluster with security group allow port 80 & 443 inbound connection from NGINX EC2 security group.
Fixes #
By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.