- https://aws.amazon.com/premiumsupport/knowledge-center/opensearch-dashboards-vpc-cognito/
- https://aws.amazon.com/premiumsupport/knowledge-center/opensearch-outside-vpc-nginx/
- We create an
internal
cognito user pool and setup access policies (cognito-auth/InternalIdentityStack
) - Setup HTTPS access through
DMZ
,Redis
security groups - Add
nginx
to proxy HTTPS request on bastion host (prototype/scripts/nginx-proxy-bastion-kibana.sh
)