Amazon Elasticsearch Service now integrates with Amazon Cognito to provide user-level authentication for Kibana, without the need to configure and manage a proxy server. With today’s release, you can sign-in to the service through enterprise identity providers such as Microsoft Active Directory using SAML 2.0, and through social identity providers such as Google, Facebook, and Amazon. You can also set up a secure, scalable, and simplified sign-up experience using Amazon Cognito User Pools. Once you sign-in, Amazon Cognito establishes a session using the appropriate AWS Identity and Access Management (IAM) role, which provides access to the Amazon Elasticsearch Service domain.