I created Amazon elasticsearch service and populated data into it using logstash, which has been installed on an EC2 instance. On the Amazon elasticservice console page, the
You may need to have IP-based policy and allow access to your domain from specific IP (Kibana's).
Other option (aside from changing access policy to be completely open) would be signing requests - IIRC this helped a friend of mine with similar message.
http://docs.aws.amazon.com/elasticsearch-service/latest/developerguide/es-managedomains.html#es-managedomains-signing-service-requests
See also "Connecting a Local Kibana Server to Amazon Elasticsearch Service" on the same page.