es:UpdateDomainConfig

Write

es:UpdateDomainConfig is a Write access-level action in the es service. Grants permission to modify the configuration of an OpenSearch Service domain, such as the instance type or number of instances

Resource types

ARNs that es:UpdateDomainConfig can be scoped to in an IAM policy.

arn:${Partition}:es:${Region}:${Account}:domain/${DomainName}
domain

Condition keys

Keys you can use in the Condition block of a policy that grants es:UpdateDomainConfig.

aws:ResourceTag/${TagKey} String

Filters access based on the tags associated with the resource

Example IAM policy

A minimal policy that allows es:UpdateDomainConfig. Replace "Resource": "*" with a specific ARN to follow least privilege.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AllowEsUpdateDomainConfig",
      "Effect": "Allow",
      "Action": "es:UpdateDomainConfig",
      "Resource": "*"
    }
  ]
}

Related actions in es

es:AcceptInboundConnection Write es:AcceptInboundCrossClusterSearchConnection Write es:AddDataSource Write es:AddDirectQueryDataSource Write es:AddTags Tagging es:AssociatePackage Write es:AssociatePackages Write es:AttachDataSource Write es:AuthorizeVpcEndpointAccess Write es:CancelDomainConfigChange Write es:CancelElasticsearchServiceSoftwareUpdate Write es:CancelServiceSoftwareUpdate Write

View all es actions →