Question

我正在使用AWS SDK连接到弹性搜索。我正在关注https://docs.aws.amazon.com/elasticsearch-service/latest/developerguide/es-indexing.html

本主题中的其他问题更像是写入elasticsearch时的权限问题或问题。对我来说，写作工作正常，只有阅读才能给我错误

POST方法工作正常，它正在添加索引。我正以同样的方式提出搜索GET请求

  public void getIndexedRecords(String index,String type,String id,String documentJSON){

        try {
            String endpoint = host +"/" +index+"/_search" ;
            // Builds the request. We need an AWS service, URI, HTTP method, and request
            // body (in this case, JSON).

            Request<?> request = new DefaultRequest<Void>(service);
            request.setEndpoint(new URI(endpoint));
            request.setHttpMethod(HttpMethodName.GET);
            request.setContent(new ByteArrayInputStream(documentJSON.getBytes()));

            // Retrieves our credentials from the computer. For more information on where
            // this class looks for credentials, see
            // http://docs.aws.amazon.com/AWSJavaSDK/latest/javadoc/com/amazonaws/auth/DefaultAWSCredentialsProviderChain.html.

            String accessKey = CommonUtils.getCommonProperty("accessKey", "");
            String secretKey = CommonUtils.getCommonProperty("secretKey", "");;
            AWSCredentials creds = new BasicAWSCredentials(accessKey, secretKey);

            // Signs the request using our region, service, and credentials. AWS4Signer
            // modifies the original request rather than returning a new request.

            AWS4Signer signer = new AWS4Signer();
            signer.setRegionName(region);
            signer.setServiceName(service);
            signer.sign(request, creds);
            request.addHeader("Content-Type", "application/json");

            // Creates and configures the HTTP client, creates the error and response
            // handlers, and finally executes the request.

            ClientConfiguration config = new ClientConfiguration();
            config.setProtocol(Protocol.HTTPS);
            AmazonHttpClient client = new AmazonHttpClient(config);
            System.out.println(client);
            ExecutionContext context = new ExecutionContext(true);
            ESAWSErrorHandler errorHandler = new ESAWSErrorHandler();
            ESAWSResponseHandler<Void> responseHandler = new ESAWSResponseHandler<Void>();
            client.requestExecutionBuilder().executionContext(context).errorResponseHandler(errorHandler).request(request)
                    .execute(responseHandler);
        } catch (Exception e) {
            e.printStackTrace();
        }


    }

但它给了我403禁止的错误。当我使用我的端点url进行Curl XGET时，我得到了结果。我在这里做错了什么？

com.amazonaws.AmazonServiceException :(服务：null;状态代码： 403;错误代码：禁止;请求ID：null）at com.amazonaws.http.AmazonHttpClient $ RequestExecutor.handleErrorResponse（AmazonHttpClient.java:1588）在 com.amazonaws.http.AmazonHttpClient $ RequestExecutor.executeOneRequest（AmazonHttpClient.java:1258）在 com.amazonaws.http.AmazonHttpClient $ RequestExecutor.executeHelper（AmazonHttpClient.java:1030）在 com.amazonaws.http.AmazonHttpClient $ RequestExecutor.doExecute（AmazonHttpClient.java:742）在 com.amazonaws.http.AmazonHttpClient $ RequestExecutor.executeWithTimer（AmazonHttpClient.java:716）在 com.amazonaws.http.AmazonHttpClient $ RequestExecutor.execute（AmazonHttpClient.java:699）在 com.amazonaws.http.AmazonHttpClient $ RequestExecutor.access 500 $（AmazonHttpClient.java:667）在 com.amazonaws.http.AmazonHttpClient $ RequestExecutionBuilderImpl.execute（AmazonHttpClient.java:649）

Answer 1

我猜您的ES政策中需要es:ESHttpGet。

参考：
Amazon Elasticsearch Service Access Control
Control Access to Your Amazon Elasticsearch Service Domain

使用AWS SDK

1 个答案: