OpenSearch Service

Prefix es, 138 actions · Domain Analytics

10 AWS managed policies. 1 have reviewed guidance; the rest have authoritative permission data pending editorial review.

User access (5)

AmazonESFullAccessAdmin
AmazonESReadOnlyAccessReader
AmazonOpenSearchServiceFullAccessAdmin
AmazonOpenSearchServiceReadOnlyAccessReader
DataScientistHigh privilegeAdmin

Operator and limited (2)

CloudWatchOpenSearchDashboardAccessOperator
CloudWatchOpenSearchDashboardsFullAccessOperator

Service roles (3)

AWSIoTRuleActionsHigh privilegeOperator
AWSQuickSightElasticsearchPolicyOperator
AWSQuicksightOpenSearchPolicyOperator

Also grants OpenSearch Service actions (26)

acceptinboundconnection acceptinboundcrossclustersearchconnection adddatasource adddirectquerydatasource addreplicationpeer addtags associatepackage associatepackages attachdatasource authorizevpcendpointaccess canceldomainconfigchange cancelelasticsearchservicesoftwareupdate cancelservicesoftwareupdate comparedomainconfiguration createapplication createdomain createelasticsearchdomain createelasticsearchservicerole createindex createoutboundconnection createoutboundcrossclustersearchconnection createpackage createservicerole createvpcendpoint deleteapplication deletedatasource deletedirectquerydatasource deletedomain deleteelasticsearchdomain deleteelasticsearchservicerole deleteinboundconnection deleteinboundcrossclustersearchconnection deleteindex deleteoutboundconnection deleteoutboundcrossclustersearchconnection deletepackage deletevpcendpoint deregistercapability describedatasourceattachment describedomain describedomainautotunes describedomainchangeprogress describedomainconfig describedomainhealth describedomainnodes describedomainreplication describedomains describedryrunprogress describeelasticsearchdomain describeelasticsearchdomainconfig describeelasticsearchdomains describeelasticsearchinstancetypelimits describeinboundconnections describeinboundcrossclustersearchconnections describeinsightdetails describeinstancetypelimits describeoutboundconnections describeoutboundcrossclustersearchconnections describepackages describereservedelasticsearchinstanceofferings describereservedelasticsearchinstances describereservedinstanceofferings describereservedinstances describevpcendpoints detachdatasource dissociatepackage dissociatepackages escrossclusterget eshttpdelete eshttpget eshttphead eshttppatch eshttppost eshttpput failoverreplication getapplication getcapability getcompatibleelasticsearchversions getcompatibleversions getdatasource getdefaultapplicationsetting getdirectquerydatasource getdomainmaintenancestatus getindex getmigration getpackageversionhistory getupgradehistory getupgradestatus insightfeedback listapplications listdatasourceattachments listdatasources listdirectquerydatasources listdomainmaintenances listdomainnames listdomainsforpackage listelasticsearchinstancetypedetails listelasticsearchinstancetypes listelasticsearchversions listinsights listinstancetypedetails listmigrations listpackagesfordomain listscheduledactions listtags listversions listvpcendpointaccess listvpcendpoints listvpcendpointsfordomain purchasereservedelasticsearchinstanceoffering purchasereservedinstanceoffering putdefaultapplicationsetting registercapability rejectinboundconnection rejectinboundcrossclustersearchconnection removereplicationpeer removetags revokevpcendpointaccess rollbackelasticsearchservicesoftwareupdate rollbackservicesoftwareupdate startdomainmaintenance startelasticsearchservicesoftwareupdate startmigration startservicesoftwareupdate switchoverreplication updateapplication updateclone updatedatasource updatedirectquerydatasource updatedomainconfig updateelasticsearchdomainconfig updateindex updatepackage updatepackagescope updatescheduledaction updatevpcendpoint upgradedomain upgradeelasticsearchdomain

Actions (138)

OpenSearch Service actions that managed policies grant
Action	Access level	Policies granting without limits	Policies granting with resource or condition limits
es:AcceptInboundConnection	Write	7	1
es:AcceptInboundCrossClusterSearchConnection	Write	7	1
es:AddDataSource	Write	7	1
es:AddDirectQueryDataSource	Write	7	2
es:AddReplicationPeer	Write	7	1
es:AddTags	Tagging	8	3
es:AssociatePackage	Write	7	1
es:AssociatePackages	Write	7	1
es:AttachDataSource	Write	7	1
es:AuthorizeVpcEndpointAccess	Write	7	1
es:CancelDomainConfigChange	Write	7	1
es:CancelElasticsearchServiceSoftwareUpdate	Write	7	1
es:CancelServiceSoftwareUpdate	Write	7	1
es:CompareDomainConfiguration	Read	7	1
es:CreateApplication	Write	7	2
es:CreateDomain	Write	7	1
es:CreateElasticsearchDomain	Write	7	2
es:CreateElasticsearchServiceRole	Write	7	1
es:CreateIndex	Write	7	1
es:CreateOutboundConnection	Write	7	1
es:CreateOutboundCrossClusterSearchConnection	Write	7	1
es:CreatePackage	Write	7	1
es:CreateServiceRole	Write	7	1
es:CreateVpcEndpoint	Write	7	1
es:DeleteApplication	Write	7	1
es:DeleteDataSource	Write	7	1
es:DeleteDirectQueryDataSource	Write	7	2
es:DeleteDomain	Write	7	1
es:DeleteElasticsearchDomain	Write	7	2
es:DeleteElasticsearchServiceRole	Write	7	1
es:DeleteInboundConnection	Write	7	1
es:DeleteInboundCrossClusterSearchConnection	Write	7	1
es:DeleteIndex	Write	7	1
es:DeleteOutboundConnection	Write	7	1
es:DeleteOutboundCrossClusterSearchConnection	Write	7	1
es:DeletePackage	Write	7	1
es:DeleteVpcEndpoint	Write	7	1
es:DeregisterCapability	Write	7	1
es:DescribeDataSourceAttachment	Read	15	1
es:DescribeDomain	Read	21	4
es:DescribeDomainAutoTunes	Read	17	1
es:DescribeDomainChangeProgress	Read	17	1
es:DescribeDomainConfig	Read	18	1
es:DescribeDomainHealth	Read	16	1
es:DescribeDomainNodes	Read	16	1
es:DescribeDomainReplication	Read	15	1
es:DescribeDomains	List	22	1
es:DescribeDryRunProgress	Read	17	1
es:DescribeElasticsearchDomain	Read	21	3
es:DescribeElasticsearchDomainConfig	Read	17	1
es:DescribeElasticsearchDomains	List	21	1
es:DescribeElasticsearchInstanceTypeLimits	List	15	1
es:DescribeInboundConnections	List	17	1
es:DescribeInboundCrossClusterSearchConnections	List	15	1
es:DescribeInsightDetails	Read	16	1
es:DescribeInstanceTypeLimits	List	17	1
es:DescribeOutboundConnections	List	17	1
es:DescribeOutboundCrossClusterSearchConnections	List	15	1
es:DescribePackages	Read	17	1
es:DescribeReservedElasticsearchInstanceOfferings	List	15	1
es:DescribeReservedElasticsearchInstances	List	15	1
es:DescribeReservedInstanceOfferings	List	17	1
es:DescribeReservedInstances	List	17	1
es:DescribeVpcEndpoints	List	17	1
es:DetachDataSource	Write	7	1
es:DissociatePackage	Write	7	1
es:DissociatePackages	Write	7	1
es:ESCrossClusterGet	Read	7	1
es:ESHttpDelete	Write	7	1
es:ESHttpGet	Read	9	3
es:ESHttpHead	Read	9	1
es:ESHttpPatch	Write	7	1
es:ESHttpPost	Write	7	3
es:ESHttpPut	Write	8	1
es:FailoverReplication	Write	7	1
es:GetApplication	Read	15	4
es:GetCapability	Read	11	1
es:GetCompatibleElasticsearchVersions	List	13	1
es:GetCompatibleVersions	List	16	1
es:GetDataSource	Read	12	1
es:GetDefaultApplicationSetting	Read	12	1
es:GetDirectQueryDataSource	Read	11	3
es:GetDomainMaintenanceStatus	Read	11	1
es:GetIndex	Read	10	1
es:GetMigration	Read	10	1
es:GetPackageVersionHistory	Read	12	1
es:GetUpgradeHistory	Read	12	1
es:GetUpgradeStatus	Read	12	1
es:InsightFeedback	Write	7	1
es:ListApplications	List	19	4
es:ListDataSourceAttachments	List	14	1
es:ListDataSources	List	16	1
es:ListDirectQueryDataSources	List	15	1
es:ListDomainMaintenances	List	15	1
es:ListDomainNames	List	25	1
es:ListDomainsForPackage	List	17	1
es:ListElasticsearchInstanceTypeDetails	List	15	1
es:ListElasticsearchInstanceTypes	List	14	1
es:ListElasticsearchVersions	List	15	1
es:ListInsights	List	15	1
es:ListInstanceTypeDetails	List	16	1
es:ListMigrations	List	14	1
es:ListPackagesForDomain	List	16	1
es:ListScheduledActions	List	16	1
es:ListTags	Read	21	3
es:ListVersions	List	16	1
es:ListVpcEndpointAccess	List	16	1
es:ListVpcEndpoints	List	16	1
es:ListVpcEndpointsForDomain	List	17	1
es:PurchaseReservedElasticsearchInstanceOffering	Write	7	1
es:PurchaseReservedInstanceOffering	Write	7	1
es:PutDefaultApplicationSetting	Write	7	1
es:RegisterCapability	Write	7	1
es:RejectInboundConnection	Write	7	1
es:RejectInboundCrossClusterSearchConnection	Write	7	1
es:RemoveReplicationPeer	Write	7	1
es:RemoveTags	Tagging	8	1
es:RevokeVpcEndpointAccess	Write	7	1
es:RollbackElasticsearchServiceSoftwareUpdate	Write	7	1
es:RollbackServiceSoftwareUpdate	Write	7	1
es:StartDomainMaintenance	Write	7	1
es:StartElasticsearchServiceSoftwareUpdate	Write	7	1
es:StartMigration	Write	7	1
es:StartServiceSoftwareUpdate	Write	7	1
es:SwitchoverReplication	Write	7	1
es:UpdateApplication	Write	8	2
es:UpdateClone	Write	7	1
es:UpdateDataSource	Write	7	1
es:UpdateDirectQueryDataSource	Write	7	1
es:UpdateDomainConfig	Write	7	1
es:UpdateElasticsearchDomainConfig	Write	7	2
es:UpdateIndex	Write	7	1
es:UpdatePackage	Write	7	1
es:UpdatePackageScope	Write	7	1
es:UpdateScheduledAction	Write	7	1
es:UpdateVpcEndpoint	Write	7	1
es:UpgradeDomain	Write	7	1
es:UpgradeElasticsearchDomain	Write	7	1