es:AuthorizeVpcEndpointAccess is a Write access-level action in the es service. Grants permission to provide access to an Amazon OpenSearch Service domain through the use of an interface VPC endpoint
This action does not support resource-level permissions; use "Resource": "*" in your policy.
No condition keys are documented for this action.
A minimal policy that allows es:AuthorizeVpcEndpointAccess. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowEsAuthorizeVpcEndpointAccess",
"Effect": "Allow",
"Action": "es:AuthorizeVpcEndpointAccess",
"Resource": "*"
}
]
}