Reading the requirements for the Elasticsearch Dynamic DB secrets engine (https://www.vaultproject.io/docs/secrets/databases/elasticdb/), it says that X-Pack is required. That would rule out AWS Elasticsearch. Would this mean I need to use the insecure flag in order for dynamic creds to work with AWS Elasticsearch or is this just not supported with AWS at all?
Based on how AWS Elasticsearch auth is handled by IAM, I am going to go ahead and say this is not possible because that’s not how it works in AWS-land.