ElasticSearch Security
Security: Enterprise Security for Elasticsearch
sscarduzio/elasticsearch-readonlyrest-plugin: Safely expose Elasticsearch REST API directly to the public
Readonly Rest supported rules
참고
Enable Authentication in ElasticSearch | Raffaeu's blog