Elasticsearch domain should only be accessible from an AWS VPC


Ensure your Amazon Elasticsearch (ES) domain is only accessible from an AWS VPC.


Using a VPC gives your Amazon ES domains an extra layer of security. Launching your clusters within a VPC ensures communication between your clusters and other AWS services is secure.


Once a domain is created with a public endpoint, it cannot be switched to VPC access. Follow the Migrating from Public Access to VPC Access docs to learn how to create a new domain and either manually reindex or migrate your data.