128 actions in the es service. Select an action to see its access level, resource ARNs, condition keys, and a copy-paste IAM policy.
Grants permission to the destination domain owner to accept an inbound cross-cluster search connection request
Grants permission to the destination domain owner to accept an inbound cross-cluster search connection request. This permission is deprecated. Use AcceptInboundConnection instead
Grants permission to add the data source for the OpenSearch Service domain
Grants permission to add the data source for the provided OpenSearch arns
Grants permission to attach resource tags to an OpenSearch Service domain, data source, or application
Grants permission to associate a package with an OpenSearch Service domain
Grants permission to associate multiple packages with an OpenSearch Service domain
Grants permission to attach a data source to an OpenSearch Application
Grants permission to provide access to an Amazon OpenSearch Service domain through the use of an interface VPC endpoint
Grants permission to cancel a change on an OpenSearch Service domain
Grants permission to cancel a service software update of a domain. This permission is deprecated. Use CancelServiceSoftwareUpdate instead
Grants permission to cancel a service software update of a domain
Grants permission to create an OpenSearch Application
Grants permission to create an Amazon OpenSearch Service domain
Grants permission to create an OpenSearch Service domain. This permission is deprecated. Use CreateDomain instead
Grants permission to create the service-linked role required for OpenSearch Service domains that use VPC access. This permission is deprecated. OpenSearch Service creates the service-linked role for you
Grants permission to create index for the OpenSearch Service domain
Grants permission to create a new cross-cluster search connection from a source domain to a destination domain
Grants permission to create a new cross-cluster search connection from a source domain to a destination domain. This permission is deprecated. Use CreateOutboundConnection instead
Grants permission to add a package for use with OpenSearch Service domains
Grants permission to create the service-linked role required for Amazon OpenSearch Service domains that use VPC access
Grants permission to create an Amazon OpenSearch Service-managed VPC endpoint
Grants permission to delete an OpenSearch Application
Grants permission to delete the data source for the OpenSearch Service domain
Grants permission to delete the data source for the provided OpenSearch arns
Grants permission to delete an Amazon OpenSearch Service domain and all of its data
Grants permission to delete an OpenSearch Service domain and all of its data. This permission is deprecated. Use DeleteDomain instead
Grants permission to delete the service-linked role required for OpenSearch Service domains that use VPC access. This permission is deprecated. Use the IAM API to delete service-linked roles
Grants permission to the destination domain owner to delete an existing inbound cross-cluster search connection
Grants permission to the destination domain owner to delete an existing inbound cross-cluster search connection. This permission is deprecated. Use DeleteInboundConnection instead
Grants permission to delete Index for the OpenSearch Service domain
Grants permission to the source domain owner to delete an existing outbound cross-cluster search connection
Grants permission to the source domain owner to delete an existing outbound cross-cluster search connection. This permission is deprecated. Use DeleteOutboundConnection instead
Grants permission to delete a package from OpenSearch Service. The package cannot be associated with any domains
Grants permission to delete an Amazon OpenSearch Service-managed interface VPC endpoint
Grants permission to deregister a capability from an OpenSearch Application
Grants permission to describe the status of a data source attachment for an OpenSearch Application
Grants permission to view a description of the domain configuration for the specified OpenSearch Service domain, including the domain ID, service endpoint, and ARN
Grants permission to view the Auto-Tune configuration of the domain for the specified OpenSearch Service domain, including the Auto-Tune state and maintenance schedules
Grants permission to view detail stage progress of an OpenSearch Service domain
Grants permission to view a description of the configuration options and status of an OpenSearch Service domain
Grants permission to view information about domain and node health, the standby Availability Zone, number of nodes per Availability Zone, and shard count per node
Grants permission to view information about nodes configured for the domain and their configurations- the node id, type of node, status of node, Availability Zone, instance type and storage
Grants permission to view a description of the domain configuration for up to five specified OpenSearch Service domains
Grants permission to describe the status of a pre-update validation check on an OpenSearch Service domain
Grants permission to view a description of the domain configuration for the specified OpenSearch Service domain, including the domain ID, service endpoint, and ARN. This permission is deprecated. Use DescribeDomain instead
Grants permission to view a description of the configuration and status of an OpenSearch Service domain. This permission is deprecated. Use DescribeDomainConfig instead
Grants permission to view a description of the domain configuration for up to five specified Amazon OpenSearch domains. This permission is deprecated. Use DescribeDomains instead
Grants permission to view the instance count, storage, and master node limits for a given OpenSearch version and instance type. This permission is deprecated. Use DescribeInstanceTypeLimits instead
Grants permission to list all the inbound cross-cluster search connections for a destination domain
Grants permission to list all the inbound cross-cluster search connections for a destination domain. This permission is deprecated. Use DescribeInboundConnections instead
Grants permission to view detailed information about insights for an OpenSearch Service domain
Grants permission to view the instance count, storage, and master node limits for a given engine version and instance type
Grants permission to list all the outbound cross-cluster search connections for a source domain
Grants permission to list all the outbound cross-cluster search connections for a source domain. This permission is deprecated. Use DescribeOutboundConnections instead
Grants permission to describe all packages available to OpenSearch Service domains
Grants permission to fetch Reserved Instance offerings for Amazon OpenSearch Service. This permission is deprecated. Use DescribeReservedInstanceOfferings instead
Grants permission to fetch OpenSearch Service Reserved Instances that have already been purchased. This permission is deprecated. Use DescribeReservedInstances instead
Grants permission to fetch Reserved Instance offerings for OpenSearch Service
Grants permission to fetch OpenSearch Service Reserved Instances that have already been purchased
Grants permission to describe one or more Amazon OpenSearch Service-managed VPC endpoints
Grants permission to detach a data source from an OpenSearch Application
Grants permission to disassociate a package from the specified OpenSearch Service domain
Grants permission to disassociate multiple packages from the specified OpenSearch Service domain
Grants permission to send cross-cluster requests to a destination domain
Grants permission to send HTTP DELETE requests to the OpenSearch APIs
Grants permission to send HTTP GET requests to the OpenSearch APIs
Grants permission to send HTTP HEAD requests to the OpenSearch APIs
Grants permission to send HTTP PATCH requests to the OpenSearch APIs
Grants permission to send HTTP POST requests to the OpenSearch APIs
Grants permission to send HTTP PUT requests to the OpenSearch APIs
Grants permission to get information about an OpenSearch Application
Grants permission to get a registered capability for an OpenSearch Application
Grants permission to fetch a list of compatible OpenSearch and Elasticsearch versions to which an OpenSearch Service domain can be upgraded. This permission is deprecated. Use GetCompatibleVersions instead
Grants permission to fetch list of compatible engine versions to which an OpenSearch Service domain can be upgraded
Grants permission to get the data source for the OpenSearch Service domain
Grants permission to get the default application setting for OpenSearch Service
Grants permission to get the data source for the provided OpenSearch arns
Grants permission to retrieve the status of maintenance action for the node
Grants permission to get index for the OpenSearch Service domain
Grants permission to fetch the version history for a package
Grants permission to fetch the upgrade history of a given OpenSearch Service domain
Grants permission to fetch the upgrade status of a given OpenSearch Service domain
Grants permission to submit feedback for OpenSearch domain insight
Grants permission to list OpenSearch Applications
Grants permission to list data source attachments for an OpenSearch Application
Grants permission to retrieve a list of data source for the OpenSearch Service domain
Grants permission to retrieve a list of data source for the provided OpenSearch arns
Grants permission to retrieve a list of maintenance actions for the OpenSearch Service domain
Grants permission to display the names of all OpenSearch Service domains that the current user owns
Grants permission to list all OpenSearch Service domains that a package is associated with
Grants permission to list all instance types and available features for a given OpenSearch version. This permission is deprecated. Use ListInstanceTypeDetails instead
Grants permission to list all EC2 instance types that are supported for a given OpenSearch version
Grants permission to list all supported OpenSearch versions on Amazon OpenSearch Service. This permission is deprecated. Use ListVersions instead
Grants permission to list insights for OpenSearch Service domains in the account
Grants permission to list all instance types and available features for a given OpenSearch or Elasticsearch version
Grants permission to list all packages associated with the OpenSearch Service domain
Grants permission to retrieve a list of configuration changes that are scheduled for a OpenSearch Service domain
Grants permission to display all resource tags for an OpenSearch Service domain, data source, or application
Grants permission to list all supported OpenSearch and Elasticsearch versions in Amazon OpenSearch Service
Grants permission to retrieve information about each AWS principal that is allowed to access a given Amazon OpenSearch Service domain through the use of an interface VPC endpoint
Grants permission to retrieve all Amazon OpenSearch Service-managed VPC endpoints in the current AWS account and Region
Grants permission to retrieve all Amazon OpenSearch Service-managed VPC endpoints associated with a particular domain
Grants permission to purchase OpenSearch Service Reserved Instances. This permission is deprecated. Use PurchaseReservedInstanceOffering instead
Grants permission to purchase OpenSearch reserved instances
Grants permission to set or remove the default application setting for OpenSearch Service
Grants permission to register a capability for an OpenSearch Application
Grants permission to the destination domain owner to reject an inbound cross-cluster search connection request
Grants permission to the destination domain owner to reject an inbound cross-cluster search connection request. This permission is deprecated. Use RejectInboundConnection instead
Grants permission to remove resource tags from an OpenSearch Service domain, data source, or application
Grants permission to revoke access to an Amazon OpenSearch Service domain that was provided through an interface VPC endpoint
Grants permission to rollback a service software update of an elasticsearch domain to its previous version
Grants permission to rollback a service software update of an opensearch domain to its previous version
Grants permission to initiate the maintenance on the node
Grants permission to start a service software update of a domain. This permission is deprecated. Use StartServiceSoftwareUpdate instead
Grants permission to start a service software update of a domain
Grants permission to update an OpenSearch Application
Grants permission to update the data source for the OpenSearch Service domain
Grants permission to update the data source for the provided OpenSearch arns
Grants permission to modify the configuration of an OpenSearch Service domain, such as the instance type or number of instances
Grants permission to modify the configuration of an OpenSearch Service domain, such as the instance type or number of instances. This permission is deprecated. Use UpdateDomainConfig instead
Grants permission to update index for the OpenSearch Service domain
Grants permission to update a package for use with OpenSearch Service domains
Grants permission to update scope a package
Grants permission to reschedule a planned OpenSearch Service domain configuration change for a later time
Grants permission to modify an Amazon OpenSearch Service-managed interface VPC endpoint
Grants permission to initiate upgrade of an OpenSearch Service domain to a given version
Grants permission to initiate upgrade of an OpenSearch Service domain to a specified version. This permission is deprecated. Use UpgradeDomain instead