Amazon elasticsearch signed requests support

[hellysmile]

elasticsearch-py requests based realization
http://elasticsearch-py.readthedocs.io/en/master/index.html?#running-on-aws-with-iam

Amazon docs:
https://aws.amazon.com/blogs/security/how-to-control-access-to-your-amazon-elasticsearch-service-domain/

[asvetlov]

Pleaase add a link to docs. What the hell is it?

[hellysmile]

Links attached, sorry

[jeremyblow]

This would be nice to have, but I think it would take some work. Requests allows a callable http_auth object to float all the way through from the transport class to a PreparedRequest object which can then (and probably not safely sooner) process the final body and headers for signing. There are also a few more gymnastics needed, for instance ensuring header date (if provided) matches the signing key's scope date.

At the surface, aiohttp looks similar, but underneath the implementation is different. Headers could, in theory, float through to the ClientSession from the ES init (c/o transport/connection), but after a quick scan I didn't see an opportunity to trigger a callable/hook. Perhaps I'm overlooking an approach within aiohttp.

[hellysmile]

Some hints to reuse parts from aiobotocore elastic/elasticsearch-py#706

[sloev]

any news on this, we need it as well.
@hellysmile did you try something with the flow from aiobotocore?