es:CreateDomain is a Write access-level action in the es service. Grants permission to create an Amazon OpenSearch Service domain
ARNs that es:CreateDomain can be scoped to in an IAM policy.
Keys you can use in the Condition block of a policy that grants es:CreateDomain.
Filters access based on the tags that are passed in the request
Filters access based on the tag keys that are passed in the request
Filters access by the security group IDs specified in the VPC options of the request
Filters access by the subnet IDs specified in the VPC options of the request
Filters access based on the tags associated with the resource
A minimal policy that allows es:CreateDomain. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowEsCreateDomain",
"Effect": "Allow",
"Action": "es:CreateDomain",
"Resource": "*"
}
]
}