EC2上部署的Java SDK连接OpenSearchService遇认证授权失败

我在EC2实例上部署的Java应用，通过Java SDK连接AWS OpenSearch Service，已执行aws configure配置凭证，但仍触发认证/授权失败错误。本地机器可正常连接目标OpenSearch域，EC2实例上无法连通。

错误日志 #

Servlet.service() for servlet [dispatcherServlet] in context with path [] threw exception [Request processing failed: org.opensearch.client.opensearch._types.OpenSearchException: Request failed: [security_exception] authentication/authorization failure] with root cause
org.opensearch.client.opensearch._types.OpenSearchException: Request failed: [security_exception] authentication/authorization failure

aws configure 配置状态 #

执行aws configure list输出：

Name                    Value             Type    Location
      ----                    -----             ----    --------
   profile                <not set>             None    None
access_key     ****************2Y4Y shared-credentials-file    
secret_key     ****************NjjN shared-credentials-file    
    region               ap-south-1      config-file    ~/.aws/config

Java客户端Bean配置 #

@Bean
public OpenSearchClient getClient() {
        SdkHttpClient httpClient = ApacheHttpClient.builder().build();
        return new OpenSearchClient(
                new AwsSdk2Transport(
                        httpClient,
                        host,
                        region,
                        AwsSdk2TransportOptions.builder().build()));

    }

OpenSearch域相关配置 #

• 已启用细粒度访问控制
• 域级访问策略：

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Principal": {
        "AWS": "*"
      },
      "Action": "es:*",
      "Resource": "arn:aws:es:ap-south-1:************:domain/opensearch-domain/*"
    }
  ]
}

内容的提问来源于stack exchange，提问作者Suvid Sahay