[tingletech]

> - If you want to ingest data with Kinesis Firehose, you can't deploy the cluster in a VPC.

why not?

https://aws.amazon.com/blogs/aws/amazon-elasticsearch-servic...

[reilly3000]

Check out the 2nd to last line of that post. They make the same statement in doc. Lots of services are getting VPC endpoints so traffic never has to hit the public web, but firehouse isn’t one of them(yet).