diff --git a/roles/bitbucket_config/defaults/main.yaml b/roles/bitbucket_config/defaults/main.yaml
index 1ae8340..0a1f114 100644
--- a/roles/bitbucket_config/defaults/main.yaml
+++ b/roles/bitbucket_config/defaults/main.yaml
@@ -3,3 +3,7 @@
 atl_bitbucket_license_key: "{{ lookup('env', 'ATL_BB_LICENSEKEY') }}"
 atl_bitbucket_properties_raw: "{{ lookup('env', 'ATL_BITBUCKET_PROPERTIES') }}"
 atl_bitbucket_properties: "{{ atl_bitbucket_properties_raw.split(' ') | reject('equalto', '') | list }}"
+
+atl_elasticsearch_username: "{{ lookup('env', 'ATL_ELASTICSEARCH_USERNAME') }}"
+atl_elasticsearch_password: "{{ lookup('env', 'ATL_ELASTICSEARCH_PASSWORD') }}"
+elasticsearch_auth_iam: "{{ atl_elasticsearch_username is not defined and atl_aws_region is defined }}"
\ No newline at end of file
diff --git a/roles/bitbucket_config/templates/bitbucket.properties.j2 b/roles/bitbucket_config/templates/bitbucket.properties.j2
index 3551c5b..4086ad9 100644
--- a/roles/bitbucket_config/templates/bitbucket.properties.j2
+++ b/roles/bitbucket_config/templates/bitbucket.properties.j2
@@ -12,8 +12,13 @@ hazelcast.network.aws.region={{ atl_aws_region }}
 hazelcast.network.aws.tag.value={{ atl_aws_stack_name }}
 hazelcast.group.name={{ atl_aws_stack_name }}
 hazelcast.group.password={{ atl_aws_stack_name }}
-plugin.search.elasticsearch.aws.region={{ atl_aws_region }}
 plugin.search.elasticsearch.baseurl={{ atl_elasticsearch_endpoint }}
+{% if elasticsearch_auth_iam == 'true' %}
+plugin.search.elasticsearch.aws.region={{ atl_aws_region }}
+{% else %}
+plugin.search.elasticsearch.username={{ atl_elasticsearch_username }}
+plugin.search.elasticsearch.password={{ atl_elasticsearch_password }}
+{% endif %}
 setup.displayName=Bitbucket
 setup.baseUrl = {{ atl_bitbucket_baseurl }}
 setup.license={{ atl_bitbucket_license_key }}