States that PUT / PATCH / GET are all supported. PUT / PATCH are disabled by default, but the config option below should enable both. However…it only enables PATCH and not PUT.
Since you can break the Search Guard authentication by uploading a faulty configuration, you need to explicitely enable the PUT endpoint by setting searchguard.unsupported.restapi.allow_sgconfig_modification: true in elasticsearch.yml