Configure Amazon Elasticsearch access policy to allow heroku app

[groovecoder]

Not exactly sure how to do this. Maybe @jsatt knows how ...

https://us-west-2.console.aws.amazon.com/es/home?region=us-west-2#city-struggle-bus:access-policy

I checked and the IP range of the heroku app can vary from (at least) 50.17.242.145 to 54.235.187.231, so I don't know that we can do an IP range. 😢 Is there a way to connect as an AWS account or IAM user?

[jsatt]

You can use user access keys with elastic search by signing the request. It took a while but I figured out how to sign requests for elastic search: https://gist.github.com/jsatt/088a02b1a4b09b854069

It's not particularly pretty and could probably be cleaned up, but if you do something like the examples you should just be able to drop that file into the project and import.

Once it's in the project, go to https://console.aws.amazon.com/iam/home?region=us-west-2#users/city-struggle-bus and create access keys. Include them in the environment variables in heroku.

[groovecoder]

Awesome, thanks. I'll check it out.