Ensure that there is no Wildcard principal in ElasticSearch access policy
Amazon OpenSearch Service offers several ways to control access to your domains. They include Resource-based policies,Identity-based policies,IP-based policies. While writing policy statement make sure you DO NOT set WILDCARD like * in Principle property. That will provide all users access to your ES domain and the control over it.
Updated 7 months ago