Sign requests to get access to a role-controlled AWS elasticsearch

sign_requests_with_instance_profile_for_aws_es.rb

require 'aws-sdk'
require 'faraday_middleware'
require 'faraday_middleware/aws_signers_v4'
require 'pp'

conn = Faraday.new(url: 'http://ENDPOINT') do |faraday|
  faraday.request :aws_signers_v4,
    credentials: Aws::InstanceProfileCredentials.new.credentials,
    service_name: 'es',
    region: 'REGION'

  faraday.response :json, :content_type => /\bjson\b/
  faraday.response :raise_error

  faraday.adapter Faraday.default_adapter
end

res = conn.get '/'
pp res.body