awslabs / logstash-output-amazon_es

Logstash output plugin to sign and export logstash events to Amazon Elasticsearch Service
Apache License 2.0
375 stars 103 forks source link

Is it possible to use the Logstash plugin with AWS Cognito? #157

Closed r3kzi closed 4 years ago

r3kzi commented 4 years ago

If i understood correctly you can specify AWS Access and Secret Keys for pushing logs to AWS ES.

What if i enable AWS Cognito for authentication?

I would think the specified Access and Secret keys only pass the Domain access policy.

helongfei-myob commented 4 years ago

The same issues, is it possible to use Logstash plugin with AWS Cognito

rlewkowicz commented 4 years ago

@AustinTag

I'm just picking anyone with commit history. There's a lot of issues surrounding authentication using this plugin with no responses. Also last commit is like 3 months ago. Is this still being developed?

r3kzi commented 4 years ago

I was actually able to solve this by giving my EC2 instance profile the permission for ES

It would be great to use IRSA :-)

AustinTag commented 4 years ago

You are correct that access and secret keys apply to a specific IAM user/role for the domain access policy. We do not currently support AWS Cognito auth via this plugin. Please see the README for authentication options.

If there is a feature request for using AWS Cognito, then please re-open this issue and we can mark this as a feature request.