Issue: got an Unauthorized (401) error when I use a NGINX proxy to access Kibana from outside of a VPC with Cognito authentication

To reproduce the issue in my environment, I created a VPC with a public subnet and a private subnet. Also I created an ES instance in the private subnet and an EC2 instance as Nginx server (with certs) in the public subnet. Then I setup cognito user pool and identity pool with Google federation.

I noticed that the request is redirected to Cognito login page again with message “something went wrong. Please try again” after Google login.

If I use native cognito (login with email: henry@example.com and password: henry111@@@) then the Kibana will be loading.

After confirming with AWS expert, the outcome is that currently federated OAuth with Google is NOT supported with Nginx for Kibana in VPC.

No Comments

Leave a Reply