Amazon OpenSearch Service (es)

2021-09-11

2 new actions | 1 updated resource, 2 updated actions | 4 removed actions, 1 removed resource

Additions

    Actions
  • StartServiceSoftwareUpdate
    • Description:  Grants permission to start OpenSearch software update of a domain to given version
    • Access:  Write
    • Resources: 

      Name: domain

      Required: Yes

  • UpgradeDomain
    • Description:  Grants permission to initiate upgrade of open search domain to given version
    • Access:  Write
    • Resources: 

      Name: domain

      Required: Yes

Updates

    Resources
  • opensearchservice_role
      Arn
    • Old: arn:${Partition}:iam::${Account}:role/aws-service-role/opensearchservice.amazonaws.com/AWSServiceRoleForAmazonOpenSearchInternalService
      New: arn:${Partition}:iam::${Account}:role/aws-service-role/opensearchservice.amazonaws.com/AWSServiceRoleForAmazonOpenSearchService
    Actions
  • DescribeDomainAutoTunes
      Description
    • Old: Grants permission to view a description of the pipeline configuration for the specified DataPrepper pipeline
      New: Grants permission to view the AutoTune configuration of the domain for the specified Amazon OpenSearch domain, including the AutoTune state and maintenance schedules
      Resources
    • [{'name': 'pipeline', 'is_required': True}]  ⟶  [{'name': 'domain', 'is_required': True}]
  • CancelServiceSoftwareUpdate
      Description
    • Old: Grants permission to create a DataPrepper pipeline
      New: Grants permission to cancel OpenSearch software update of a domain to given version
      Resources
    • [{'name': 'pipeline', 'is_required': False}]  ⟶  [{'name': 'domain', 'is_required': True}]

Deletions

    Actions
  • DeleteDataPrepperPipeline
    • Description:  Grants permission to delete a DataPrepperpipeline
    • Access:  Write
    • Resources: 

      Name: pipeline

      Required: Yes

  • IngestDataPrepperPipeline
    • Description:  Grants permission to ingest data into a DataPrepper pipeline
    • Access:  Write
    • Resources: 

      Name: pipeline

      Required: No

  • ListDataPrepperPipelines
    • Description:  Grants permission to display the names of all DataPrepper pipelines that the current user owns
    • Access:  List
  • UpdateDataPrepperPipeline
    • Description:  Grants permission to modify the configuration of a DataPrepper pipeline (currently limited to updating desired capacity)
    • Access:  Write
    • Resources: 

      Name: pipeline

      Required: Yes

    Resources
  • pipeline
    • Arn:  arn:${Partition}:es:${Region}:${Account}:pipeline/${PipelineName}
    • Conditions: 

      aws:ResourceTag/${TagKey}