For compliance purposes, brokered Elasticsearch service instances may only be accessed from within the Cloud.gov environment. Additionally in order to connect to these instances, AWS requires the use of signed HTTP headers. If you plan to connect to your Elasticsearch instance from your local environment frequently, this can present challenges.