es:DeleteElasticsearchDomain

Write

es:DeleteElasticsearchDomain is a Write access-level action in the es service. Grants permission to delete an OpenSearch Service domain and all of its data. This permission is deprecated. Use DeleteDomain instead

Resource types

ARNs that es:DeleteElasticsearchDomain can be scoped to in an IAM policy.

arn:${Partition}:es:${Region}:${Account}:domain/${DomainName}
domain

Condition keys

Keys you can use in the Condition block of a policy that grants es:DeleteElasticsearchDomain.

aws:ResourceTag/${TagKey} String

Filters access based on the tags associated with the resource

Example IAM policy

A minimal policy that allows es:DeleteElasticsearchDomain. Replace "Resource": "*" with a specific ARN to follow least privilege.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AllowEsDeleteElasticsearchDomain",
      "Effect": "Allow",
      "Action": "es:DeleteElasticsearchDomain",
      "Resource": "*"
    }
  ]
}

Related actions in es

es:AcceptInboundConnection Write es:AcceptInboundCrossClusterSearchConnection Write es:AddDataSource Write es:AddDirectQueryDataSource Write es:AddTags Tagging es:AssociatePackage Write es:AssociatePackages Write es:AttachDataSource Write es:AuthorizeVpcEndpointAccess Write es:CancelDomainConfigChange Write es:CancelElasticsearchServiceSoftwareUpdate Write es:CancelServiceSoftwareUpdate Write

View all es actions →