In the EC2 sandbox, NiFi currently uses 'sandbox.kylo.io' in URLs and this prevents certain features from working. Disabling proxy headers in httpd.conf will force NiFi to use the Host header from the HTTP request instead.
Fixed the patch. I tested on a new Kylo 0.9.1 sandbox and the above patch fixes the issue.