Amazon OpenSearch Service (es)

Additions

Actions

• StartServiceSoftwareUpdate
  
  • Description:  Grants permission to start OpenSearch software update of a domain to given version
  • Access:  Write
  • Resources: 

    Name: domain

    Required: Yes

• UpgradeDomain
  
  • Description:  Grants permission to initiate upgrade of open search domain to given version
  • Access:  Write
  • Resources: 

    Name: domain

    Required: Yes

Updates

Resources

• opensearchservice_role
  
  Arn
  
  • Old: arn:${Partition}:iam::${Account}:role/aws-service-role/opensearchservice.amazonaws.com/AWSServiceRoleForAmazonOpenSearchInternalService
    New: arn:${Partition}:iam::${Account}:role/aws-service-role/opensearchservice.amazonaws.com/AWSServiceRoleForAmazonOpenSearchService

Actions

• DescribeDomainAutoTunes
  
  Description
  
  • Old: Grants permission to view a description of the pipeline configuration for the specified DataPrepper pipeline
    New: Grants permission to view the AutoTune configuration of the domain for the specified Amazon OpenSearch domain, including the AutoTune state and maintenance schedules
  Resources
  
  • [{'name': 'pipeline', 'is_required': True}]  ⟶  [{'name': 'domain', 'is_required': True}]
• CancelServiceSoftwareUpdate
  
  Description
  
  • Old: Grants permission to create a DataPrepper pipeline
    New: Grants permission to cancel OpenSearch software update of a domain to given version
  Resources
  
  • [{'name': 'pipeline', 'is_required': False}]  ⟶  [{'name': 'domain', 'is_required': True}]

Deletions

Actions

• DeleteDataPrepperPipeline
  
  • Description:  Grants permission to delete a DataPrepperpipeline
  • Access:  Write
  • Resources: 

    Name: pipeline

    Required: Yes

• IngestDataPrepperPipeline
  
  • Description:  Grants permission to ingest data into a DataPrepper pipeline
  • Access:  Write
  • Resources: 

    Name: pipeline

    Required: No

• ListDataPrepperPipelines
  
  • Description:  Grants permission to display the names of all DataPrepper pipelines that the current user owns
  • Access:  List
• UpdateDataPrepperPipeline
  
  • Description:  Grants permission to modify the configuration of a DataPrepper pipeline (currently limited to updating desired capacity)
  • Access:  Write
  • Resources: 

    Name: pipeline

    Required: Yes

Resources

• pipeline
  
  • Arn:  arn:${Partition}:es:${Region}:${Account}:pipeline/${PipelineName}
  • Conditions: 

    aws:ResourceTag/${TagKey}