I am currently working on an AWS setup where data is pushed to an Elasticsearch service via Amazon Kinesis (Firehose). This data has to be accessible from all EC2 instances that are connected to a certain IAM role. The Kibana interface also has to be accessible from a given amount of IP addresses.
How would I correctly define the access policy for the Elasticsearch service? (I have already tried several combinations and for some reason I am always getting the access denied error for user "anonymous".)