EKS Pod Identity with AWS OpenSearch FGAC

[jkupchotcg]

I'm trying to access an OpenSearch cluster running in AWS using an EKS Pod Identity and an OpenSearch cluster with Fine-Grained Access Control enabled.

I can tell the pod is running with the correct IAM role, but I'm a bit confused as to what knobs to tweak in order for the data-prepper configuration to work using that IAM role. It seems like I should be able to add the IAM Role as an external ID to the OpenSearch cluster, but that doesn't seem to be working.

If anyone has tips on how to get this working with an Assumed IAM Role and a Fine-Grained Access Control OpenSearch cluster, that'd be super helpful, thanks!