es:DescribeElasticsearchDomain

Read

es:DescribeElasticsearchDomain is a Read access-level action in the es service. Grants permission to view a description of the domain configuration for the specified OpenSearch Service domain, including the domain ID, service endpoint, and ARN. This permission is deprecated. Use DescribeDomain instead

Resource types

ARNs that es:DescribeElasticsearchDomain can be scoped to in an IAM policy.

arn:${Partition}:es:${Region}:${Account}:domain/${DomainName}
domain

Condition keys

Keys you can use in the Condition block of a policy that grants es:DescribeElasticsearchDomain.

aws:ResourceTag/${TagKey} String

Filters access based on the tags associated with the resource

Example IAM policy

A minimal policy that allows es:DescribeElasticsearchDomain. Replace "Resource": "*" with a specific ARN to follow least privilege.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AllowEsDescribeElasticsearchDomain",
      "Effect": "Allow",
      "Action": "es:DescribeElasticsearchDomain",
      "Resource": "*"
    }
  ]
}

Related actions in es

es:AcceptInboundConnection Write es:AcceptInboundCrossClusterSearchConnection Write es:AddDataSource Write es:AddDirectQueryDataSource Write es:AddTags Tagging es:AssociatePackage Write es:AssociatePackages Write es:AttachDataSource Write es:AuthorizeVpcEndpointAccess Write es:CancelDomainConfigChange Write es:CancelElasticsearchServiceSoftwareUpdate Write es:CancelServiceSoftwareUpdate Write

View all es actions →