AWS OpenSearch access adventures

This post was originally published on Lune Engineering Blog on 2025-11-18. Lune graciously allowed me to republish it here. I had to set up an OpenSearch (née Elasticsearch) cluster on AWS recently and I was not entertained to find out there were actually two distinct access failure modes. Say as …