The last time I set up an Elasticsearch instance it got owned a year later due to a remote code execution vulnerability [1]. I found out because Amazon asked m

The last time I set up an Elasticsearch instance it got owned a year later due to a remote code execution vulnerability [1]. I found out because Amazon asked me why I was DOSing people. For people who don't have time or resources to actively manage an ES cluster, security is another reason to go with Amazon's service. [1] http://bouk.co/blog/elasticsearch-rce/ http://bouk.co/blog/elasticsearch-rce/