Select Language:
If you’re seeing a 403 Forbidden error when trying to access OpenSearch Dashboards, it usually means there is an issue with your permissions or how your request is signed. Even if you believe you have the right permissions, it’s important to double-check that your identity includes the necessary actions in your permissions policy. Specifically, your IAM role should have the ‘aoss:DashboardsAccessAll’ and ‘aoss:APIAccessAll’ actions allowed. These are essential for using OpenSearch Dashboards and the serverless APIs.
Another step is to review the details of your request. Turning on verbose logging or checking the network activity in your browser’s developer tools can reveal more error details. These clues can help you understand what’s going wrong.
If your permissions are correct but you still get the error, consider these common issues:
First, check your network settings. Make sure your network policy permits access to the OpenSearch Serverless APIs and dashboards. If you’re accessing from the internet, ensure public access is enabled. If you need a private connection, set up a VPC endpoint which allows private, secure access.
Second, review how your client is signing requests. Mistakes in request signing can cause authentication failures. You might want to test your connection using the AWS CLI or simple tools like curl to confirm that your requests are correctly signed and authorized.
Always verify both your IAM permissions and network configurations. Both need to be properly set up for smooth access to OpenSearch Dashboards.
For more detailed troubleshooting steps, you can visit the AWS documentation on resolving OpenSearch Serverless errors.





