{
  "url": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_es.html",
  "name": "Amazon OpenSearch Service",
  "prefix": "es",
  "timestamp": "1786363206",
  "actions": [
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_AcceptInboundConnection.html",
      "name": "AcceptInboundConnection",
      "description": "Grants permission to the destination domain owner to accept an inbound cross-cluster search connection request",
      "access": "Write",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_AcceptInboundConnection.html",
      "name": "AcceptInboundCrossClusterSearchConnection",
      "description": "Grants permission to the destination domain owner to accept an inbound cross-cluster search connection request. This permission is deprecated. Use AcceptInboundConnection instead",
      "access": "Write",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_AddDataSource.html",
      "name": "AddDataSource",
      "description": "Grants permission to add the data source for the OpenSearch Service domain",
      "access": "Write",
      "resources": [
        {
          "name": "domain",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_AddDirectQueryDataSource.html",
      "name": "AddDirectQueryDataSource",
      "description": "Grants permission to add the data source for the provided OpenSearch arns",
      "access": "Write",
      "resources": [
        {
          "name": "datasource",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:TagKeys"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_AddTags.html",
      "name": "AddTags",
      "description": "Grants permission to attach resource tags to an OpenSearch Service domain, data source, or application",
      "access": "Tagging",
      "resources": [
        {
          "name": "application",
          "is_required": true
        },
        {
          "name": "datasource",
          "is_required": true
        },
        {
          "name": "domain",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:TagKeys"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_AssociatePackage.html",
      "name": "AssociatePackage",
      "description": "Grants permission to associate a package with an OpenSearch Service domain",
      "access": "Write",
      "resources": [
        {
          "name": "domain",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_AssociatePackages.html",
      "name": "AssociatePackages",
      "description": "Grants permission to associate multiple packages with an OpenSearch Service domain",
      "access": "Write",
      "resources": [
        {
          "name": "domain",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_AttachDataSource.html",
      "name": "AttachDataSource",
      "description": "Grants permission to attach a data source to an OpenSearch Application",
      "access": "Write",
      "resources": [
        {
          "name": "application",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_AuthorizeVpcEndpointAccess.html",
      "name": "AuthorizeVpcEndpointAccess",
      "description": "Grants permission to provide access to an Amazon OpenSearch Service domain through the use of an interface VPC endpoint",
      "access": "Write",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_CancelDomainConfigChange.html",
      "name": "CancelDomainConfigChange",
      "description": "Grants permission to cancel a change on an OpenSearch Service domain",
      "access": "Write",
      "resources": [
        {
          "name": "domain",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_CancelServiceSoftwareUpdate.html",
      "name": "CancelElasticsearchServiceSoftwareUpdate",
      "description": "Grants permission to cancel a service software update of a domain. This permission is deprecated. Use CancelServiceSoftwareUpdate instead",
      "access": "Write",
      "resources": [
        {
          "name": "domain",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_CancelServiceSoftwareUpdate.html",
      "name": "CancelServiceSoftwareUpdate",
      "description": "Grants permission to cancel a service software update of a domain",
      "access": "Write",
      "resources": [
        {
          "name": "domain",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_CreateApplication.html",
      "name": "CreateApplication",
      "description": "Grants permission to create an OpenSearch Application",
      "access": "Write",
      "resources": [],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:TagKeys"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_CreateDomain.html",
      "name": "CreateDomain",
      "description": "Grants permission to create an Amazon OpenSearch Service domain",
      "access": "Write",
      "resources": [
        {
          "name": "domain",
          "is_required": false
        }
      ],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:TagKeys"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_CreateDomain.html",
      "name": "CreateElasticsearchDomain",
      "description": "Grants permission to create an OpenSearch Service domain. This permission is deprecated. Use CreateDomain instead",
      "access": "Write",
      "resources": [
        {
          "name": "domain",
          "is_required": false
        }
      ],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:TagKeys"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/Welcome.html",
      "name": "CreateElasticsearchServiceRole",
      "description": "Grants permission to create the service-linked role required for OpenSearch Service domains that use VPC access. This permission is deprecated. OpenSearch Service creates the service-linked role for you",
      "access": "Write",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_CreateIndex.html",
      "name": "CreateIndex",
      "description": "Grants permission to create index for the OpenSearch Service domain",
      "access": "Write",
      "resources": [
        {
          "name": "domain",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_CreateOutboundConnection.html",
      "name": "CreateOutboundConnection",
      "description": "Grants permission to create a new cross-cluster search connection from a source domain to a destination domain",
      "access": "Write",
      "resources": [
        {
          "name": "domain",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_CreateOutboundConnection.html",
      "name": "CreateOutboundCrossClusterSearchConnection",
      "description": "Grants permission to create a new cross-cluster search connection from a source domain to a destination domain. This permission is deprecated. Use CreateOutboundConnection instead",
      "access": "Write",
      "resources": [
        {
          "name": "domain",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_CreatePackage.html",
      "name": "CreatePackage",
      "description": "Grants permission to add a package for use with OpenSearch Service domains",
      "access": "Write",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/Welcome.html",
      "name": "CreateServiceRole",
      "description": "Grants permission to create the service-linked role required for Amazon OpenSearch Service domains that use VPC access",
      "access": "Write",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_CreateVpcEndpoint.html",
      "name": "CreateVpcEndpoint",
      "description": "Grants permission to create an Amazon OpenSearch Service-managed VPC endpoint",
      "access": "Write",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_DeleteApplication.html",
      "name": "DeleteApplication",
      "description": "Grants permission to delete an OpenSearch Application",
      "access": "Write",
      "resources": [
        {
          "name": "application",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_DeleteDataSource.html",
      "name": "DeleteDataSource",
      "description": "Grants permission to delete the data source for the OpenSearch Service domain",
      "access": "Write",
      "resources": [
        {
          "name": "domain",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_DeleteDirectQueryDataSource.html",
      "name": "DeleteDirectQueryDataSource",
      "description": "Grants permission to delete the data source for the provided OpenSearch arns",
      "access": "Write",
      "resources": [
        {
          "name": "datasource",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_DeleteDomain.html",
      "name": "DeleteDomain",
      "description": "Grants permission to delete an Amazon OpenSearch Service domain and all of its data",
      "access": "Write",
      "resources": [
        {
          "name": "domain",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_DeleteDomain.html",
      "name": "DeleteElasticsearchDomain",
      "description": "Grants permission to delete an OpenSearch Service domain and all of its data. This permission is deprecated. Use DeleteDomain instead",
      "access": "Write",
      "resources": [
        {
          "name": "domain",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_Welcome.html",
      "name": "DeleteElasticsearchServiceRole",
      "description": "Grants permission to delete the service-linked role required for OpenSearch Service domains that use VPC access. This permission is deprecated. Use the IAM API to delete service-linked roles",
      "access": "Write",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_DeleteInboundConnection.html",
      "name": "DeleteInboundConnection",
      "description": "Grants permission to the destination domain owner to delete an existing inbound cross-cluster search connection",
      "access": "Write",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_DeleteInboundConnection.html",
      "name": "DeleteInboundCrossClusterSearchConnection",
      "description": "Grants permission to the destination domain owner to delete an existing inbound cross-cluster search connection. This permission is deprecated. Use DeleteInboundConnection instead",
      "access": "Write",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_DeleteIndex.html",
      "name": "DeleteIndex",
      "description": "Grants permission to delete Index for the OpenSearch Service domain",
      "access": "Write",
      "resources": [
        {
          "name": "domain",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_DeleteOutboundConnection.html",
      "name": "DeleteOutboundConnection",
      "description": "Grants permission to the source domain owner to delete an existing outbound cross-cluster search connection",
      "access": "Write",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_DeleteOutboundConnection.html",
      "name": "DeleteOutboundCrossClusterSearchConnection",
      "description": "Grants permission to the source domain owner to delete an existing outbound cross-cluster search connection. This permission is deprecated. Use DeleteOutboundConnection instead",
      "access": "Write",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_DeletePackage.html",
      "name": "DeletePackage",
      "description": "Grants permission to delete a package from OpenSearch Service. The package cannot be associated with any domains",
      "access": "Write",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_DeleteVpcEndpoint.html",
      "name": "DeleteVpcEndpoint",
      "description": "Grants permission to delete an Amazon OpenSearch Service-managed interface VPC endpoint",
      "access": "Write",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_DeregisterCapability.html",
      "name": "DeregisterCapability",
      "description": "Grants permission to deregister a capability from an OpenSearch Application",
      "access": "Write",
      "resources": [
        {
          "name": "application",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_DescribeDataSourceAttachment.html",
      "name": "DescribeDataSourceAttachment",
      "description": "Grants permission to describe the status of a data source attachment for an OpenSearch Application",
      "access": "Read",
      "resources": [
        {
          "name": "application",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_DescribeDomain.html",
      "name": "DescribeDomain",
      "description": "Grants permission to view a description of the domain configuration for the specified OpenSearch Service domain, including the domain ID, service endpoint, and ARN",
      "access": "Read",
      "resources": [
        {
          "name": "domain",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_DescribeDomainAutoTunes.html",
      "name": "DescribeDomainAutoTunes",
      "description": "Grants permission to view the Auto-Tune configuration of the domain for the specified OpenSearch Service domain, including the Auto-Tune state and maintenance schedules",
      "access": "Read",
      "resources": [
        {
          "name": "domain",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_DescribeDomainChangeProgress.html",
      "name": "DescribeDomainChangeProgress",
      "description": "Grants permission to view detail stage progress of an OpenSearch Service domain",
      "access": "Read",
      "resources": [
        {
          "name": "domain",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_DescribeDomainConfig.html",
      "name": "DescribeDomainConfig",
      "description": "Grants permission to view a description of the configuration options and status of an OpenSearch Service domain",
      "access": "Read",
      "resources": [
        {
          "name": "domain",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_DescribeDomainHealth.html",
      "name": "DescribeDomainHealth",
      "description": "Grants permission to view information about domain and node health, the standby Availability Zone, number of nodes per Availability Zone, and shard count per node",
      "access": "Read",
      "resources": [
        {
          "name": "domain",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_DescribeDomainNodes.html",
      "name": "DescribeDomainNodes",
      "description": "Grants permission to view information about nodes configured for the domain and their configurations- the node id, type of node, status of node, Availability Zone, instance type and storage",
      "access": "Read",
      "resources": [
        {
          "name": "domain",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_DescribeDomains.html",
      "name": "DescribeDomains",
      "description": "Grants permission to view a description of the domain configuration for up to five specified OpenSearch Service domains",
      "access": "List",
      "resources": [
        {
          "name": "domain",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_DescribeDryRunProgress.html",
      "name": "DescribeDryRunProgress",
      "description": "Grants permission to describe the status of a pre-update validation check on an OpenSearch Service domain",
      "access": "Read",
      "resources": [
        {
          "name": "domain",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_DescribeDomain.html",
      "name": "DescribeElasticsearchDomain",
      "description": "Grants permission to view a description of the domain configuration for the specified OpenSearch Service domain, including the domain ID, service endpoint, and ARN. This permission is deprecated. Use DescribeDomain instead",
      "access": "Read",
      "resources": [
        {
          "name": "domain",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_DescribeDomainConfig.html",
      "name": "DescribeElasticsearchDomainConfig",
      "description": "Grants permission to view a description of the configuration and status of an OpenSearch Service domain. This permission is deprecated. Use DescribeDomainConfig instead",
      "access": "Read",
      "resources": [
        {
          "name": "domain",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_DescribeDomains.html",
      "name": "DescribeElasticsearchDomains",
      "description": "Grants permission to view a description of the domain configuration for up to five specified Amazon OpenSearch domains. This permission is deprecated. Use DescribeDomains instead",
      "access": "List",
      "resources": [
        {
          "name": "domain",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_DescribeInstanceTypeLimits.html",
      "name": "DescribeElasticsearchInstanceTypeLimits",
      "description": "Grants permission to view the instance count, storage, and master node limits for a given OpenSearch version and instance type. This permission is deprecated. Use DescribeInstanceTypeLimits instead",
      "access": "List",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_DescribeInboundConnections.html",
      "name": "DescribeInboundConnections",
      "description": "Grants permission to list all the inbound cross-cluster search connections for a destination domain",
      "access": "List",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_DescribeInboundConnections.html",
      "name": "DescribeInboundCrossClusterSearchConnections",
      "description": "Grants permission to list all the inbound cross-cluster search connections for a destination domain. This permission is deprecated. Use DescribeInboundConnections instead",
      "access": "List",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_DescribeInsightDetails.html",
      "name": "DescribeInsightDetails",
      "description": "Grants permission to view detailed information about insights for an OpenSearch Service domain",
      "access": "Read",
      "resources": [
        {
          "name": "domain",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_DescribeInstanceTypeLimits.html",
      "name": "DescribeInstanceTypeLimits",
      "description": "Grants permission to view the instance count, storage, and master node limits for a given engine version and instance type",
      "access": "List",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_DescribeOutboundConnections.html",
      "name": "DescribeOutboundConnections",
      "description": "Grants permission to list all the outbound cross-cluster search connections for a source domain",
      "access": "List",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_DescribeOutboundConnections.html",
      "name": "DescribeOutboundCrossClusterSearchConnections",
      "description": "Grants permission to list all the outbound cross-cluster search connections for a source domain. This permission is deprecated. Use DescribeOutboundConnections instead",
      "access": "List",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_DescribePackages.html",
      "name": "DescribePackages",
      "description": "Grants permission to describe all packages available to OpenSearch Service domains",
      "access": "Read",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_DescribeReservedInstanceOfferings.html",
      "name": "DescribeReservedElasticsearchInstanceOfferings",
      "description": "Grants permission to fetch Reserved Instance offerings for Amazon OpenSearch Service. This permission is deprecated. Use DescribeReservedInstanceOfferings instead",
      "access": "List",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_DescribeReservedInstances.html",
      "name": "DescribeReservedElasticsearchInstances",
      "description": "Grants permission to fetch OpenSearch Service Reserved Instances that have already been purchased. This permission is deprecated. Use DescribeReservedInstances instead",
      "access": "List",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_DescribeReservedInstanceOfferings.html",
      "name": "DescribeReservedInstanceOfferings",
      "description": "Grants permission to fetch Reserved Instance offerings for OpenSearch Service",
      "access": "List",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_DescribeReservedInstances.html",
      "name": "DescribeReservedInstances",
      "description": "Grants permission to fetch OpenSearch Service Reserved Instances that have already been purchased",
      "access": "List",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_DescribeVpcEndpoints.html",
      "name": "DescribeVpcEndpoints",
      "description": "Grants permission to describe one or more Amazon OpenSearch Service-managed VPC endpoints",
      "access": "List",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_DetachDataSource.html",
      "name": "DetachDataSource",
      "description": "Grants permission to detach a data source from an OpenSearch Application",
      "access": "Write",
      "resources": [
        {
          "name": "application",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_DissociatePackage.html",
      "name": "DissociatePackage",
      "description": "Grants permission to disassociate a package from the specified OpenSearch Service domain",
      "access": "Write",
      "resources": [
        {
          "name": "domain",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_DissociatePackages.html",
      "name": "DissociatePackages",
      "description": "Grants permission to disassociate multiple packages from the specified OpenSearch Service domain",
      "access": "Write",
      "resources": [
        {
          "name": "domain",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/Welcome.html",
      "name": "ESCrossClusterGet",
      "description": "Grants permission to send cross-cluster requests to a destination domain",
      "access": "Read",
      "resources": [
        {
          "name": "domain",
          "is_required": false
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/Welcome.html",
      "name": "ESHttpDelete",
      "description": "Grants permission to send HTTP DELETE requests to the OpenSearch APIs",
      "access": "Write",
      "resources": [
        {
          "name": "domain",
          "is_required": false
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/Welcome.html",
      "name": "ESHttpGet",
      "description": "Grants permission to send HTTP GET requests to the OpenSearch APIs",
      "access": "Read",
      "resources": [
        {
          "name": "domain",
          "is_required": false
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/Welcome.html",
      "name": "ESHttpHead",
      "description": "Grants permission to send HTTP HEAD requests to the OpenSearch APIs",
      "access": "Read",
      "resources": [
        {
          "name": "domain",
          "is_required": false
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/Welcome.html",
      "name": "ESHttpPatch",
      "description": "Grants permission to send HTTP PATCH requests to the OpenSearch APIs",
      "access": "Write",
      "resources": [
        {
          "name": "domain",
          "is_required": false
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/Welcome.html",
      "name": "ESHttpPost",
      "description": "Grants permission to send HTTP POST requests to the OpenSearch APIs",
      "access": "Write",
      "resources": [
        {
          "name": "domain",
          "is_required": false
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/Welcome.html",
      "name": "ESHttpPut",
      "description": "Grants permission to send HTTP PUT requests to the OpenSearch APIs",
      "access": "Write",
      "resources": [
        {
          "name": "domain",
          "is_required": false
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_GetApplication.html",
      "name": "GetApplication",
      "description": "Grants permission to get information about an OpenSearch Application",
      "access": "Read",
      "resources": [
        {
          "name": "application",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_GetCapability.html",
      "name": "GetCapability",
      "description": "Grants permission to get a registered capability for an OpenSearch Application",
      "access": "Read",
      "resources": [
        {
          "name": "application",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_GetCompatibleVersions.html",
      "name": "GetCompatibleElasticsearchVersions",
      "description": "Grants permission to fetch a list of compatible OpenSearch and Elasticsearch versions to which an OpenSearch Service domain can be upgraded. This permission is deprecated. Use GetCompatibleVersions instead",
      "access": "List",
      "resources": [
        {
          "name": "domain",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_GetCompatibleVersions.html",
      "name": "GetCompatibleVersions",
      "description": "Grants permission to fetch list of compatible engine versions to which an OpenSearch Service domain can be upgraded",
      "access": "List",
      "resources": [
        {
          "name": "domain",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_GetDataSource.html",
      "name": "GetDataSource",
      "description": "Grants permission to get the data source for the OpenSearch Service domain",
      "access": "Read",
      "resources": [
        {
          "name": "domain",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_GetDefaultApplicationSetting.html",
      "name": "GetDefaultApplicationSetting",
      "description": "Grants permission to get the default application setting for OpenSearch Service",
      "access": "Read",
      "resources": [
        {
          "name": "application",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_GetDirectQueryDataSource.html",
      "name": "GetDirectQueryDataSource",
      "description": "Grants permission to get the data source for the provided OpenSearch arns",
      "access": "Read",
      "resources": [
        {
          "name": "datasource",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_GetDomainMaintenanceStatus.html",
      "name": "GetDomainMaintenanceStatus",
      "description": "Grants permission to retrieve the status of maintenance action for the node",
      "access": "Read",
      "resources": [
        {
          "name": "domain",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_GetIndex.html",
      "name": "GetIndex",
      "description": "Grants permission to get index for the OpenSearch Service domain",
      "access": "Read",
      "resources": [
        {
          "name": "domain",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_GetMigration.html",
      "name": "GetMigration",
      "description": "Grants permission to get the status and progress of a migration job for an OpenSearch Application",
      "access": "Read",
      "resources": [
        {
          "name": "application",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_GetPackageVersionHistory.html",
      "name": "GetPackageVersionHistory",
      "description": "Grants permission to fetch the version history for a package",
      "access": "Read",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_GetUpgradeHistory.html",
      "name": "GetUpgradeHistory",
      "description": "Grants permission to fetch the upgrade history of a given OpenSearch Service domain",
      "access": "Read",
      "resources": [
        {
          "name": "domain",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_GetUpgradeStatus.html",
      "name": "GetUpgradeStatus",
      "description": "Grants permission to fetch the upgrade status of a given OpenSearch Service domain",
      "access": "Read",
      "resources": [
        {
          "name": "domain",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_InsightFeedback.html",
      "name": "InsightFeedback",
      "description": "Grants permission to submit feedback for OpenSearch domain insight",
      "access": "Write",
      "resources": [
        {
          "name": "domain",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_ListApplications.html",
      "name": "ListApplications",
      "description": "Grants permission to list OpenSearch Applications",
      "access": "List",
      "resources": [
        {
          "name": "application",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_ListDataSourceAttachments.html",
      "name": "ListDataSourceAttachments",
      "description": "Grants permission to list data source attachments for an OpenSearch Application",
      "access": "List",
      "resources": [
        {
          "name": "application",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_ListDataSources.html",
      "name": "ListDataSources",
      "description": "Grants permission to retrieve a list of data source for the OpenSearch Service domain",
      "access": "List",
      "resources": [
        {
          "name": "domain",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_ListDirectQueryDataSources.html",
      "name": "ListDirectQueryDataSources",
      "description": "Grants permission to retrieve a list of data source for the provided OpenSearch arns",
      "access": "List",
      "resources": [
        {
          "name": "datasource",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_ListDomainMaintenances.html",
      "name": "ListDomainMaintenances",
      "description": "Grants permission to retrieve a list of maintenance actions for the OpenSearch Service domain",
      "access": "List",
      "resources": [
        {
          "name": "domain",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_ListDomainNames.html",
      "name": "ListDomainNames",
      "description": "Grants permission to display the names of all OpenSearch Service domains that the current user owns",
      "access": "List",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_ListDomainsForPackage.html",
      "name": "ListDomainsForPackage",
      "description": "Grants permission to list all OpenSearch Service domains that a package is associated with",
      "access": "List",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_ListInstanceTypeDetails.html",
      "name": "ListElasticsearchInstanceTypeDetails",
      "description": "Grants permission to list all instance types and available features for a given OpenSearch version. This permission is deprecated. Use ListInstanceTypeDetails instead",
      "access": "List",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_ListInstanceTypeDetails.html",
      "name": "ListElasticsearchInstanceTypes",
      "description": "Grants permission to list all EC2 instance types that are supported for a given OpenSearch version",
      "access": "List",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_ListVersions.html",
      "name": "ListElasticsearchVersions",
      "description": "Grants permission to list all supported OpenSearch versions on Amazon OpenSearch Service. This permission is deprecated. Use ListVersions instead",
      "access": "List",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_ListInsights.html",
      "name": "ListInsights",
      "description": "Grants permission to list insights for OpenSearch Service domains in the account",
      "access": "List",
      "resources": [
        {
          "name": "domain",
          "is_required": false
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_ListInstanceTypeDetails.html",
      "name": "ListInstanceTypeDetails",
      "description": "Grants permission to list all instance types and available features for a given OpenSearch or Elasticsearch version",
      "access": "List",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_ListMigrations.html",
      "name": "ListMigrations",
      "description": "Grants permission to list migration jobs for an OpenSearch Application",
      "access": "List",
      "resources": [
        {
          "name": "application",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_ListPackagesForDomain.html",
      "name": "ListPackagesForDomain",
      "description": "Grants permission to list all packages associated with the OpenSearch Service domain",
      "access": "List",
      "resources": [
        {
          "name": "domain",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_ListScheduledActions.html",
      "name": "ListScheduledActions",
      "description": "Grants permission to retrieve a list of configuration changes that are scheduled for a OpenSearch Service domain",
      "access": "List",
      "resources": [
        {
          "name": "domain",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_ListTags.html",
      "name": "ListTags",
      "description": "Grants permission to display all resource tags for an OpenSearch Service domain, data source, or application",
      "access": "Read",
      "resources": [
        {
          "name": "application",
          "is_required": true
        },
        {
          "name": "datasource",
          "is_required": true
        },
        {
          "name": "domain",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_ListVersions.html",
      "name": "ListVersions",
      "description": "Grants permission to list all supported OpenSearch and Elasticsearch versions in Amazon OpenSearch Service",
      "access": "List",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_ListVpcEndpointAccess.html",
      "name": "ListVpcEndpointAccess",
      "description": "Grants permission to retrieve information about each AWS principal that is allowed to access a given Amazon OpenSearch Service domain through the use of an interface VPC endpoint",
      "access": "List",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_ListVpcEndpoints.html",
      "name": "ListVpcEndpoints",
      "description": "Grants permission to retrieve all Amazon OpenSearch Service-managed VPC endpoints in the current AWS account and Region",
      "access": "List",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_ListVpcEndpointsForDomain.html",
      "name": "ListVpcEndpointsForDomain",
      "description": "Grants permission to retrieve all Amazon OpenSearch Service-managed VPC endpoints associated with a particular domain",
      "access": "List",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_PurchaseReservedInstanceOffering.html",
      "name": "PurchaseReservedElasticsearchInstanceOffering",
      "description": "Grants permission to purchase OpenSearch Service Reserved Instances. This permission is deprecated. Use PurchaseReservedInstanceOffering instead",
      "access": "Write",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_PurchaseReservedInstanceOffering.html",
      "name": "PurchaseReservedInstanceOffering",
      "description": "Grants permission to purchase OpenSearch reserved instances",
      "access": "Write",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_PutDefaultApplicationSetting.html",
      "name": "PutDefaultApplicationSetting",
      "description": "Grants permission to set or remove the default application setting for OpenSearch Service",
      "access": "Write",
      "resources": [
        {
          "name": "application",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_RegisterCapability.html",
      "name": "RegisterCapability",
      "description": "Grants permission to register a capability for an OpenSearch Application",
      "access": "Write",
      "resources": [
        {
          "name": "application",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_RejectInboundConnection.html",
      "name": "RejectInboundConnection",
      "description": "Grants permission to the destination domain owner to reject an inbound cross-cluster search connection request",
      "access": "Write",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_RejectInboundConnection.html",
      "name": "RejectInboundCrossClusterSearchConnection",
      "description": "Grants permission to the destination domain owner to reject an inbound cross-cluster search connection request. This permission is deprecated. Use RejectInboundConnection instead",
      "access": "Write",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_RemoveTags.html",
      "name": "RemoveTags",
      "description": "Grants permission to remove resource tags from an OpenSearch Service domain, data source, or application",
      "access": "Tagging",
      "resources": [
        {
          "name": "application",
          "is_required": true
        },
        {
          "name": "datasource",
          "is_required": true
        },
        {
          "name": "domain",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:TagKeys"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_RevokeVpcEndpointAccess.html",
      "name": "RevokeVpcEndpointAccess",
      "description": "Grants permission to revoke access to an Amazon OpenSearch Service domain that was provided through an interface VPC endpoint",
      "access": "Write",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_RollbackServiceSoftwareUpdate.html",
      "name": "RollbackElasticsearchServiceSoftwareUpdate",
      "description": "Grants permission to rollback a service software update of an elasticsearch domain to its previous version",
      "access": "Write",
      "resources": [
        {
          "name": "domain",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_RollbackServiceSoftwareUpdate.html",
      "name": "RollbackServiceSoftwareUpdate",
      "description": "Grants permission to rollback a service software update of an opensearch domain to its previous version",
      "access": "Write",
      "resources": [
        {
          "name": "domain",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_StartDomainMaintenance.html",
      "name": "StartDomainMaintenance",
      "description": "Grants permission to initiate the maintenance on the node",
      "access": "Write",
      "resources": [
        {
          "name": "domain",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_StartServiceSoftwareUpdate.html",
      "name": "StartElasticsearchServiceSoftwareUpdate",
      "description": "Grants permission to start a service software update of a domain. This permission is deprecated. Use StartServiceSoftwareUpdate instead",
      "access": "Write",
      "resources": [
        {
          "name": "domain",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_StartMigration.html",
      "name": "StartMigration",
      "description": "Grants permission to initiate a migration of saved objects to an OpenSearch Application",
      "access": "Write",
      "resources": [
        {
          "name": "application",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_StartServiceSoftwareUpdate.html",
      "name": "StartServiceSoftwareUpdate",
      "description": "Grants permission to start a service software update of a domain",
      "access": "Write",
      "resources": [
        {
          "name": "domain",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_UpdateApplication.html",
      "name": "UpdateApplication",
      "description": "Grants permission to update an OpenSearch Application",
      "access": "Write",
      "resources": [
        {
          "name": "application",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_UpdateDataSource.html",
      "name": "UpdateDataSource",
      "description": "Grants permission to update the data source for the OpenSearch Service domain",
      "access": "Write",
      "resources": [
        {
          "name": "domain",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_UpdateDirectQueryDataSource.html",
      "name": "UpdateDirectQueryDataSource",
      "description": "Grants permission to update the data source for the provided OpenSearch arns",
      "access": "Write",
      "resources": [
        {
          "name": "datasource",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_UpdateDomainConfig.html",
      "name": "UpdateDomainConfig",
      "description": "Grants permission to modify the configuration of an OpenSearch Service domain, such as the instance type or number of instances",
      "access": "Write",
      "resources": [
        {
          "name": "domain",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_UpdateDomainConfig.html",
      "name": "UpdateElasticsearchDomainConfig",
      "description": "Grants permission to modify the configuration of an OpenSearch Service domain, such as the instance type or number of instances. This permission is deprecated. Use UpdateDomainConfig instead",
      "access": "Write",
      "resources": [
        {
          "name": "domain",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_UpdateIndex.html",
      "name": "UpdateIndex",
      "description": "Grants permission to update index for the OpenSearch Service domain",
      "access": "Write",
      "resources": [
        {
          "name": "domain",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_UpdatePackage.html",
      "name": "UpdatePackage",
      "description": "Grants permission to update a package for use with OpenSearch Service domains",
      "access": "Write",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_UpdatePackageScope.html",
      "name": "UpdatePackageScope",
      "description": "Grants permission to update scope a package",
      "access": "Write",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_UpdateScheduledAction.html",
      "name": "UpdateScheduledAction",
      "description": "Grants permission to reschedule a planned OpenSearch Service domain configuration change for a later time",
      "access": "Write",
      "resources": [
        {
          "name": "domain",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_UpdateVpcEndpoint.html",
      "name": "UpdateVpcEndpoint",
      "description": "Grants permission to modify an Amazon OpenSearch Service-managed interface VPC endpoint",
      "access": "Write",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_UpgradeDomain.html",
      "name": "UpgradeDomain",
      "description": "Grants permission to initiate upgrade of an OpenSearch Service domain to a given version",
      "access": "Write",
      "resources": [
        {
          "name": "domain",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_UpgradeDomain.html",
      "name": "UpgradeElasticsearchDomain",
      "description": "Grants permission to initiate upgrade of an OpenSearch Service domain to a specified version. This permission is deprecated. Use UpgradeDomain instead",
      "access": "Write",
      "resources": [
        {
          "name": "domain",
          "is_required": true
        }
      ],
      "conditions": []
    }
  ],
  "resources": [
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/developerguide/ac.html",
      "name": "application",
      "arn": "arn:${Partition}:opensearch:${Region}:${Account}:application/${AppId}",
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/developerguide/datasource.html",
      "name": "datasource",
      "arn": "arn:${Partition}:opensearch:${Region}:${Account}:datasource/${DataSourceName}",
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/developerguide/ac.html",
      "name": "domain",
      "arn": "arn:${Partition}:es:${Region}:${Account}:domain/${DomainName}",
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/developerguide/slr.html",
      "name": "es_role",
      "arn": "arn:${Partition}:iam::${Account}:role/aws-service-role/es.amazonaws.com/AWSServiceRoleForAmazonOpenSearchService",
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/opensearch-service/latest/developerguide/slr.html",
      "name": "opensearchservice_role",
      "arn": "arn:${Partition}:iam::${Account}:role/aws-service-role/opensearchservice.amazonaws.com/AWSServiceRoleForAmazonOpenSearchService",
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    }
  ],
  "conditions": [
    {
      "url": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-requesttag",
      "name": "aws:RequestTag/${TagKey}",
      "description": "Filters access based on the tags that are passed in the request",
      "type": "String"
    },
    {
      "url": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-resourcetag",
      "name": "aws:ResourceTag/${TagKey}",
      "description": "Filters access based on the tags associated with the resource",
      "type": "String"
    },
    {
      "url": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-tagkeys",
      "name": "aws:TagKeys",
      "description": "Filters access based on the tag keys that are passed in the request",
      "type": "ArrayOfString"
    }
  ]
}