# Ingest data from AWS Kinesis Data Firehose

**URL:** https://discuss.elastic.co/t/ingest-data-from-aws-kinesis-data-firehose/363540
**Category:** Elasticsearch
**Created:** [July 22, 2024, 9:46am UTC](https://discuss.elastic.co/t/ingest-data-from-aws-kinesis-data-firehose/363540 "2024-07-22T09:46:27Z")
**Posts on this page:** 2
**Page:** 1

<div class="post-metadata">

### Author: ![noor.muradi](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/noor.muradi/32/136207_2.png) [@noor.muradi](https://discuss.elastic.co/u/noor.muradi)
#### Post date: [July 22, 2024, 9:46am UTC](https://discuss.elastic.co/t/ingest-data-from-aws-kinesis-data-firehose/363540/1 "2024-07-22T09:46:27Z")

</div>

I have ECK cluster, and I want to ingest AWS WAF logs to elastic using Kineses Data Firehose, created encoded api key in Kibana with superuser role, in Kenises data firehose, have configured destination endpoint with elastic http endpoint, configured API key, and following parameters: "es\_datastream\_name logs-aws.waf-default"  
getting below destination error in Kineses, I have performed other actions with same API key which works perfectly.

I have taken exact steps using following official guide:

[![](https://us1.discourse-cdn.com/elastic/original/3X/a/d/ad950cd66baec0aa7de677c7144ce69597028989.jpeg "Sending Logs from Amazon Kinesis Data Firehose to Elastic Observability") ](https://www.youtube.com/watch?v=DmnmrMPRloQ&t=97s)

```auto
unexpected fields. Raw response received: 401 {"error":{"root_cause":[{"type":"security_exception","reason":"missing authentication credentials for REST request [/]","header":{"WWW-Authenticate":["Basic realm=\"security\" charset=\"UTF-8\"","Bearer realm=\"security\"","ApiKey"]}}],"type":"security_exception","reason":"missing authentication credentials for REST request [/]","header":{"WWW-Authenticate":["Basic realm=\"security\" charset=\"UTF-8\"","Bearer realm=\"security\"","ApiKey"]}},"status":401}

```

---

<div class="post-metadata">

### Author: ![James\_Moon](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/james_moon/32/122154_2.png) [@James\_Moon](https://discuss.elastic.co/u/James_Moon)
#### Post date: [August 14, 2024, 7:32am UTC](https://discuss.elastic.co/t/ingest-data-from-aws-kinesis-data-firehose/363540/2 "2024-08-14T07:32:41Z")

</div>

Hi Noor,  
As updated by [this PR](https://github.com/elastic/observability-docs/pull/3991), [the official document](https://www.elastic.co/guide/en/observability/current/ingest-aws-firehose.html) states that the first step is to create a deployment in AWS regions.

ECK isn't currently supported.

Regards,  
James