Kibana specific permissions for AWS ElasticSearch domain - amazon-web-services

Question

We've stumbled across an issue that is bothering us for some time and we would really appreciate your help.
Our problem lies with permissions for ElasticSearch service in combination with Kibana. We have ES domain with WRITE/READ permissions only from our Lambdas and READ permissions only from the IPs of our company offices. We use Kibana(on AWS, not local) for visualizing our data, and the problem is that we need to allow POST actions over the ES domains in order Kibana to be able to work, otherwise we just get permission issues. But that also means that we need to open POST requests for our company IPs, which is something we don’t want. Our question is how we can allow only Kibana to have that sort of permissions. Our goal is to have the READ/WRITE access only for our lambdas, READ permissions only for our company IPs and the needed permissions for Kibana in order to work without interfering with the rest of the permissions.
This is the access policy we have on the ES domain:
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Principal": {
"AWS": "<ROLE_USED_BY_OUR_LAMBDA>"
},
"Action": "es:*",
"Resource": "<ELASTICSEARCH_DOMAIN>/*"
},
{
"Effect": "Allow",
"Principal": {
"AWS": "*"
},
"Action": [
"es:ESHttpGet",
"es:ESHttpHead",
"es:Describe*",
"es:List*"
],
"Resource": "<ELASTICSEARCH_DOMAIN>/*",
"Condition": {
"IpAddress": {
"aws:SourceIp": [
"<COMPANY_IP_1>",
"<COMPANY_IP_2>",
"<COMPANY_IP_3>"
]
}
}
}
}
]
}