@Jaff What do you mean by We have solved the problem by entering the updated key names in elasticsearch.yml? David is correct that the keystore settings should be discovery.ec2.access_key and discovery.ec2.secret_key. Any of the old settings will not work there (unfortunately we do not yet have validation of settings in the keystore, so you will not get an error if you add settings that should not be there). But setting eg discovery.ec2.access_key in elasticsearch.yml should not work. This setting should only be allowed in the keystore.