es:DescribeDomainHealth is a Read access-level action in the es service. Grants permission to view information about domain and node health, the standby Availability Zone, number of nodes per Availability Zone, and shard count per node
ARNs that es:DescribeDomainHealth can be scoped to in an IAM policy.
Keys you can use in the Condition block of a policy that grants es:DescribeDomainHealth.
Filters access based on the tags associated with the resource
A minimal policy that allows es:DescribeDomainHealth. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowEsDescribeDomainHealth",
"Effect": "Allow",
"Action": "es:DescribeDomainHealth",
"Resource": "*"
}
]
}