Posted On: Oct 17, 2017

You can now easily set up access to Amazon Elasticsearch Service from your VPC without having to configure and maintain firewall rules and IP-based access policies for each domain. This new feature lets you keep all traffic between your Amazon VPC and Amazon Elasticsearch Service within the AWS network instead of traversing the public Internet. VPC support for Amazon Elasticsearch Service enhances security, simplifies network administration and is available today at no additional cost.

VPC support allows Amazon Elasticsearch Service domains to receive IP addresses from within your VPC, which keeps these domains securely isolated from the public Internet. You can use your existing VPC security groups to control access. Access control can be further tightened by applying AWS Identity and Access Management (IAM) policies. 

Elasticsearch is a popular open-source analytics and search engine for log analytics, application monitoring, full-text search and more. Amazon Elasticsearch Service delivers Elasticsearch’s easy-to-use APIs and real-time capabilities along with the security, availability, and scalability required by production workloads. 

VPC support is available in 14 regions: US East (N. Virginia), US East (Ohio), US West (Oregon), US West (N. California), Canada (Central), South America (Sao Paulo), EU (Ireland), EU (London), EU (Frankfurt), Asia Pacific (Singapore), Asia Pacific (Sydney), Asia Pacific (Tokyo), Asia Pacific (Seoul), and Asia Pacific (Mumbai). 

To learn more about VPC support for Amazon Elasticsearch Service, see the Amazon Elasticsearch Service Developer Guide and this in-depth blog post