403使用AWS SDK从AWS弹性搜索获取索引时出现禁止错误

Question

我正在使用AWS SDK连接到弹性搜索。我正在浏览https://docs.aws.amazon.com/elasticsearch-service/latest/developerguide/es-indexing.html

本主题中的其他问题更像是权限问题或在给ElasticSearch写信时出现的问题。对我来说，写作很好，只有阅读给了我错误

POST方法工作得很好，它正在添加索引。我正在以相同的方式进行GET搜索请求

  public void getIndexedRecords(String index,String type,String id,String documentJSON){

        try {
            String endpoint = host +"/" +index+"/_search" ;
            // Builds the request. We need an AWS service, URI, HTTP method, and request
            // body (in this case, JSON).

            Request<?> request = new DefaultRequest<Void>(service);
            request.setEndpoint(new URI(endpoint));
            request.setHttpMethod(HttpMethodName.GET);
            request.setContent(new ByteArrayInputStream(documentJSON.getBytes()));

            // Retrieves our credentials from the computer. For more information on where
            // this class looks for credentials, see
            // http://docs.aws.amazon.com/AWSJavaSDK/latest/javadoc/com/amazonaws/auth/DefaultAWSCredentialsProviderChain.html.

            String accessKey = CommonUtils.getCommonProperty("accessKey", "");
            String secretKey = CommonUtils.getCommonProperty("secretKey", "");;
            AWSCredentials creds = new BasicAWSCredentials(accessKey, secretKey);

            // Signs the request using our region, service, and credentials. AWS4Signer
            // modifies the original request rather than returning a new request.

            AWS4Signer signer = new AWS4Signer();
            signer.setRegionName(region);
            signer.setServiceName(service);
            signer.sign(request, creds);
            request.addHeader("Content-Type", "application/json");

            // Creates and configures the HTTP client, creates the error and response
            // handlers, and finally executes the request.

            ClientConfiguration config = new ClientConfiguration();
            config.setProtocol(Protocol.HTTPS);
            AmazonHttpClient client = new AmazonHttpClient(config);
            System.out.println(client);
            ExecutionContext context = new ExecutionContext(true);
            ESAWSErrorHandler errorHandler = new ESAWSErrorHandler();
            ESAWSResponseHandler<Void> responseHandler = new ESAWSResponseHandler<Void>();
            client.requestExecutionBuilder().executionContext(context).errorResponseHandler(errorHandler).request(request)
                    .execute(responseHandler);
        } catch (Exception e) {
            e.printStackTrace();
        }


    }

但它给了我一个403禁止错误。当我使用endpointurl Curl XGET时，我得到的是结果。我在这里做错了什么？

Com.AmazonAws.AmazonServiceException：（服务：null；状态代码：403；错误代码：禁止；请求ID：null）位于com.AmazonAws.HTTP.AmazonHttpClient$RequestExecutor.HandleErrorResponse（AmazonHttpClient$RequestExecutor.ExecuteOneRequest（AmazonHttpClient.1588）位于com.AmazonAws.HTTP.AmazonHttpClient$RequestExecutor.ExecuteOneRequest（AmazonHttpClient.1258）位于

Answer 1

我想您可能需要在ES策略中使用ES:esHttpGet。

参考:
Amazon Elasticsearch Service Access Control
控制对您的Amazon Elasticsearch服务域的访问