OpenSearch Serverless
Prefix aoss, 57 actions · Domain Analytics
3 AWS managed policies. 0 have reviewed guidance; the rest have authoritative permission data pending editorial review.
Operator and limited (2)
Service roles (1)
Also grants OpenSearch Serverless actions (24)
- AdministratorAccess
- AIDevOpsAgentAccessPolicy
- AIDevOpsAgentActionsPolicy
- AIOpsAssistantPolicy
- AmazonBedrockStudioPermissionsBoundary
- AmazonDataZoneFullAccess
- AssuranceServiceRolePolicy
- AWS_ConfigRole
- AWSCODAPermissionsBoundary
- AWSConfigServiceRolePolicy
- AWSMcpServiceActionsFullAccess
- AWSResourceExplorerServiceRolePolicy
- AWSSupportServiceRolePolicy
- AWSWellArchitectedAgentResourceScanningServiceRolePolicy
- CloudWatchOmniAWSIntegrationPolicy
- ConsoleFullAccessFromVercel
- ConsoleViewOnlyAccessFromVercel
- PowerUserAccess
- ReadOnlyAccess
- SageMakerStudioBedrockKnowledgeBaseServiceRolePolicy
- SageMakerStudioFullAccess
- SageMakerStudioProjectProvisioningRolePolicy
- SageMakerStudioProjectUserRolePermissionsBoundary
- WellArchitectedAgentResourceScanning
apiaccessall addcollectiontocollectiongroup batchgetcollection batchgetcollectiongroup batchgeteffectivelifecyclepolicy batchgetlifecyclepolicy batchgetvpcendpoint cancelingestionjob createaccesspolicy createcollection createcollectiongroup createindex createingestionjob createingestionstream createlifecyclepolicy createsecurityconfig createsecuritypolicy createvpcendpoint dashboardsaccessall deleteaccesspolicy deletecollection deletecollectiongroup deleteindex deleteingestionstream deletelifecyclepolicy deletesecurityconfig deletesecuritypolicy deletevpcendpoint getaccesspolicy getaccountsettings getindex getingestionjob getingestionstream getpoliciesstats getsecurityconfig getsecuritypolicy listaccesspolicies listcollectiongroups listcollections listingestionjobs listingestionstreams listlifecyclepolicies listsecurityconfigs listsecuritypolicies listtagsforresource listvpcendpoints tagresource untagresource updateaccesspolicy updateaccountsettings updatecollection updatecollectiongroup updateindex updatelifecyclepolicy updatesecurityconfig updatesecuritypolicy updatevpcendpoint
Actions (57)
| Action | Access level | Policies granting without limits | Policies granting with resource or condition limits |
|---|---|---|---|
| aoss:APIAccessAll | Write | 6 | 6 |
| aoss:AddCollectionToCollectionGroup | Write | 5 | 1 |
| aoss:BatchGetCollection | Read | 15 | 6 |
| aoss:BatchGetCollectionGroup | Read | 12 | 2 |
| aoss:BatchGetEffectiveLifecyclePolicy | Read | 5 | 1 |
| aoss:BatchGetLifecyclePolicy | Read | 13 | 5 |
| aoss:BatchGetVpcEndpoint | Read | 13 | 3 |
| aoss:CancelIngestionJob | Write | 4 | 1 |
| aoss:CreateAccessPolicy | Write | 4 | 3 |
| aoss:CreateCollection | Write | 4 | 3 |
| aoss:CreateCollectionGroup | Write | 4 | 1 |
| aoss:CreateIndex | Write | 5 | 1 |
| aoss:CreateIngestionJob | Write | 4 | 1 |
| aoss:CreateIngestionStream | Write | 4 | 1 |
| aoss:CreateLifecyclePolicy | Write | 4 | 2 |
| aoss:CreateSecurityConfig | Write | 4 | 1 |
| aoss:CreateSecurityPolicy | Write | 4 | 5 |
| aoss:CreateVpcEndpoint | Write | 4 | 1 |
| aoss:DashboardsAccessAll | Write | 5 | 1 |
| aoss:DeleteAccessPolicy | Write | 4 | 3 |
| aoss:DeleteCollection | Write | 4 | 3 |
| aoss:DeleteCollectionGroup | Write | 4 | 1 |
| aoss:DeleteIndex | Write | 5 | 1 |
| aoss:DeleteIngestionStream | Write | 4 | 1 |
| aoss:DeleteLifecyclePolicy | Write | 4 | 2 |
| aoss:DeleteSecurityConfig | Write | 4 | 1 |
| aoss:DeleteSecurityPolicy | Write | 4 | 3 |
| aoss:DeleteVpcEndpoint | Write | 4 | 1 |
| aoss:GetAccessPolicy | Read | 15 | 6 |
| aoss:GetAccountSettings | Read | 6 | 1 |
| aoss:GetIndex | Read | 7 | 1 |
| aoss:GetIngestionJob | Read | 4 | 1 |
| aoss:GetIngestionStream | Read | 4 | 1 |
| aoss:GetPoliciesStats | Read | 6 | 1 |
| aoss:GetSecurityConfig | Read | 13 | 3 |
| aoss:GetSecurityPolicy | Read | 15 | 8 |
| aoss:ListAccessPolicies | List | 15 | 3 |
| aoss:ListCollectionGroups | List | 15 | 2 |
| aoss:ListCollections | List | 15 | 3 |
| aoss:ListIngestionJobs | List | 7 | 1 |
| aoss:ListIngestionStreams | List | 7 | 1 |
| aoss:ListLifecyclePolicies | List | 13 | 3 |
| aoss:ListSecurityConfigs | List | 15 | 3 |
| aoss:ListSecurityPolicies | List | 17 | 3 |
| aoss:ListTagsForResource | List | 15 | 3 |
| aoss:ListVpcEndpoints | List | 13 | 3 |
| aoss:TagResource | Tagging | 5 | 3 |
| aoss:UntagResource | Tagging | 5 | 1 |
| aoss:UpdateAccessPolicy | Write | 5 | 2 |
| aoss:UpdateAccountSettings | Write | 4 | 1 |
| aoss:UpdateCollection | Write | 5 | 2 |
| aoss:UpdateCollectionGroup | Write | 5 | 1 |
| aoss:UpdateIndex | Write | 5 | 1 |
| aoss:UpdateLifecyclePolicy | Write | 4 | 1 |
| aoss:UpdateSecurityConfig | Write | 4 | 1 |
| aoss:UpdateSecurityPolicy | Write | 5 | 2 |
| aoss:UpdateVpcEndpoint | Write | 4 | 1 |