Rokko11 ( https://hibernate.atlassian.net/secure/ViewProfile.jspa?accountId=712020%... ) *commented* on HSEARCH-4867 ( https://hibernate.atlassian.net/browse/HSEARCH-4867?atlOrigin=eyJpIjoiNDA... ) Re: Support AWS OpenSearch Serverless ( https://hibernate.atlassian.net/browse/HSEARCH-4867?atlOrigin=eyJpIjoiNDA... ) Using this small reproducer: https://github.com/Mozenn/spring-boot-hibernate-search Spring configuration is logging: level: org: hibernate: search: backend: elasticsearch: TRACE spring: jpa: open-in-view: false properties: hibernate: search: backend: aws: region: <region> signing: enabled: true discovery: enabled: false hosts: <collection>.<region>.aoss.amazonaws.com protocol: https type: elasticsearch version: opensearch:2.5 version_check: enabled: false schema_management: strategy: create-or-validate Credentials are stored in environment variables. The full trace log is. You see that the service key was inserted correctly. 2023-06-06 15:44:07.706 INFO 23196 --- [ main] o.h.e.t.j.p.i.JtaPlatformInitiator : HHH000490: Using JtaPlatform implementation: [org.hibernate.engine.transaction.jta.platform.internal.NoJtaPlatform] 2023-06-06 15:44:07.900 DEBUG 23196 --- [ main] o.h.s.b.e.index.layout.impl.IndexNames : Normalizing index name from 'Plant-write' to 'plant-write' 2023-06-06 15:44:07.901 DEBUG 23196 --- [ main] o.h.s.b.e.index.layout.impl.IndexNames : Normalizing index name from 'Plant-read' to 'plant-read' 2023-06-06 15:44:07.901 DEBUG 23196 --- [ main] o.h.s.b.e.index.layout.impl.IndexNames : Normalizing index name from 'Plant' to 'plant' 2023-06-06 15:44:08.152 DEBUG 23196 --- [ main] a.i.ElasticsearchAwsHttpClientConfigurer : AWS request signing is enabled [region = '<region>', credentialsProvider = 'DefaultCredentialsProvider(providerChain=LazyAwsCredentialsProvider(delegate=Lazy(value=Uninitialized)))']. 2023-06-06 15:44:11.936 WARN 23196 --- [ main] .h.s.b.e.d.i.ElasticsearchDialectFactory : HSEARCH400085: Unknown Elasticsearch version running on the cluster: 'opensearch:2.5'. Hibernate Search may not work correctly. Consider updating to a newer version of Hibernate Search, if any. 2023-06-06 15:44:12.448 TRACE 23196 --- [ main] h.s.b.e.a.i.AwsSigningRequestInterceptor : HTTP request (before signing): GET /plant-write,plant-read?ignore_unavailable=true&allow_no_indices=true HTTP/1.1 [Content-Length: 0, Host: <collection>.<region>.aoss.amazonaws.com:443, Connection: Keep-Alive, User-Agent: elasticsearch-java/7.15.2-SNAPSHOT (Java/17.0.7)] 2023-06-06 15:44:12.449 TRACE 23196 --- [ main] h.s.b.e.a.i.AwsSigningRequestInterceptor : AWS request (before signing): DefaultSdkHttpFullRequest(httpMethod=GET, protocol=https, host=<collection>.<region>.aoss.amazonaws.com, port=443, encodedPath=/plant-write,plant-read, headers=[], queryParameters=[ignore_unavailable, allow_no_indices]) 2023-06-06 15:44:12.662 TRACE 23196 --- [ main] h.s.b.e.a.i.AwsSigningRequestInterceptor : AWS credentials: AwsCredentials(accessKeyId=<access-key>) 2023-06-06 15:44:19.456 TRACE 23196 --- [ main] h.s.b.e.a.i.AwsSigningRequestInterceptor : AWS request (after signing): DefaultSdkHttpFullRequest(httpMethod=GET, protocol=https, host=<collection>.<region>.aoss.amazonaws.com, port=443, encodedPath=/plant-write,plant-read, headers=[Authorization, Host, X-Amz-Date], queryParameters=[ignore_unavailable, allow_no_indices]) 2023-06-06 15:44:19.457 TRACE 23196 --- [ main] h.s.b.e.a.i.AwsSigningRequestInterceptor : HTTP request (after signing): GET /plant-write,plant-read?ignore_unavailable=true&allow_no_indices=true HTTP/1.1 [Content-Length: 0, Host: <collection>.<region>.aoss.amazonaws.com, Connection: Keep-Alive, User-Agent: elasticsearch-java/7.15.2-SNAPSHOT (Java/17.0.7), Authorization: AWS4-HMAC-SHA256 Credential=<access-key>/20230606/<region>/aoss/aws4_request, SignedHeaders=host;x-amz-date, Signature=c1dd3543...2bd784218, X-Amz-Date: 20230606T134419Z] 2023-06-06 15:44:20.470 DEBUG 23196 --- [port thread - 1] o.h.s.b.e.index.layout.impl.IndexNames : Normalizing index name from 'Plant-000001' to 'plant-000001' 2023-06-06 15:44:20.511 TRACE 23196 --- [port thread - 1] h.s.b.e.a.i.AwsSigningRequestInterceptor : HTTP request (before signing): PUT /plant-000001 HTTP/1.1 [Content-Length: 496, Content-Type: application/json; charset=UTF-8, Host: <collection>.<region>.aoss.amazonaws.com:443, Connection: Keep-Alive, User-Agent: elasticsearch-java/7.15.2-SNAPSHOT (Java/17.0.7)] 2023-06-06 15:44:20.512 TRACE 23196 --- [port thread - 1] h.s.b.e.a.i.AwsSigningRequestInterceptor : AWS request (before signing): DefaultSdkHttpFullRequest(httpMethod=PUT, protocol=https, host=<collection>.<region>.aoss.amazonaws.com, port=443, encodedPath=/plant-000001, headers=[], queryParameters=[]) 2023-06-06 15:44:20.512 TRACE 23196 --- [port thread - 1] h.s.b.e.a.i.AwsSigningRequestInterceptor : AWS credentials: AwsCredentials(accessKeyId=<access-key>) 2023-06-06 15:44:23.804 TRACE 23196 --- [port thread - 1] h.s.b.e.a.i.AwsSigningRequestInterceptor : AWS request (after signing): DefaultSdkHttpFullRequest(httpMethod=PUT, protocol=https, host=<collection>.<region>.aoss.amazonaws.com, port=443, encodedPath=/plant-000001, headers=[Authorization, Host, X-Amz-Date], queryParameters=[]) 2023-06-06 15:44:23.805 TRACE 23196 --- [port thread - 1] h.s.b.e.a.i.AwsSigningRequestInterceptor : HTTP request (after signing): PUT /plant-000001 HTTP/1.1 [Content-Length: 496, Content-Type: application/json; charset=UTF-8, Host: <collection>.<region>.aoss.amazonaws.com, Connection: Keep-Alive, User-Agent: elasticsearch-java/7.15.2-SNAPSHOT (Java/17.0.7), Authorization: AWS4-HMAC-SHA256 Credential=<access-key>/20230606/<region>/aoss/aws4_request, SignedHeaders=host;x-amz-date, Signature=cc0b142...282453616231d9d, X-Amz-Date: 20230606T134423Z] 2023-06-06 15:44:23.910 ERROR 23196 --- [port thread - 1] o.h.s.e.r.spi.RootFailureCollector : HSEARCH000521: Hibernate Search encountered a failure during bootstrap; continuing for now to list all problems, but the process will ultimately be aborted. Context: Hibernate ORM mapping, type 'com.mozen.springboothibernatesearch.model.Plant' Failure: org.hibernate.search.util.common.SearchException: HSEARCH400007: Elasticsearch request failed: HSEARCH400090: Elasticsearch response indicates a failure. Request: PUT /plant-000001 with parameters {} Response: 403 'Forbidden' from 'https://<collection>.<region>.aoss.amazonaws.com' with body { "status": 403, "request-id": "6ec4d116-6532-9bd2-8344-5cf07260d987", "error": { "reason": "Invalid signature, does not match", "type": "AccessDenied" } } ( https://hibernate.atlassian.net/browse/HSEARCH-4867#add-comment?atlOrigin... ) Add Comment ( https://hibernate.atlassian.net/browse/HSEARCH-4867#add-comment?atlOrigin... ) Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.... ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=Em... ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100225- sha1:3b7cdab )