How to control access of AWS Elasticsearch Service and Kibana?
This blog post does a great job of describing the options available to you for controlling access to Amazon ElasticSearch.
- You can use identity federation via Cognito User Pools.
- Resource based policy: Explicitly allow access to the cluster for a given IAM user ID in the ElasticSearch policy.
- User based policy: Explicitly grant that IAM user's role access to the ARN of your ES cluster
- Put your ES service behind a proxy with authentication
This SO question/answers go into more depth, with various high quality answers: How to access Kibana from Amazon elasticsearch service?