es:UpdateElasticsearchDomainConfig

Write

es:UpdateElasticsearchDomainConfig is a Write access-level action in the es service. Grants permission to modify the configuration of an OpenSearch Service domain, such as the instance type or number of instances. This permission is deprecated. Use UpdateDomainConfig instead

Resource types

ARNs that es:UpdateElasticsearchDomainConfig can be scoped to in an IAM policy.

arn:${Partition}:es:${Region}:${Account}:domain/${DomainName}
domain

Condition keys

Keys you can use in the Condition block of a policy that grants es:UpdateElasticsearchDomainConfig.

aws:ResourceTag/${TagKey} String

Filters access based on the tags associated with the resource

Example IAM policy

A minimal policy that allows es:UpdateElasticsearchDomainConfig. Replace "Resource": "*" with a specific ARN to follow least privilege.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AllowEsUpdateElasticsearchDomainConfig",
      "Effect": "Allow",
      "Action": "es:UpdateElasticsearchDomainConfig",
      "Resource": "*"
    }
  ]
}

Related actions in es

View all es actions →