es:RevokeVpcEndpointAccess is a Write access-level action in the es service. Grants permission to revoke access to an Amazon OpenSearch Service domain that was provided through an interface VPC endpoint
This action does not support resource-level permissions; use "Resource": "*" in your policy.
No condition keys are documented for this action.
A minimal policy that allows es:RevokeVpcEndpointAccess. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowEsRevokeVpcEndpointAccess",
"Effect": "Allow",
"Action": "es:RevokeVpcEndpointAccess",
"Resource": "*"
}
]
}