Amazon OpenSearch Ingestion (osis)

Additions

Actions

• CreatePipeline
  
  • Description:  Grants permission to create an OpenSearch Ingestion pipeline
  • Access:  Write
  • Conditions: 

    aws:TagKeys

    aws:RequestTag/${TagKey}

• DeletePipeline
  
  • Description:  Grants permission to delete an OpenSearch Ingestion pipeline
  • Access:  Write
  • Resources: 

    Name: pipeline

    Required: Yes

• GetPipeline
  
  • Description:  Grants permission to retrieve configuration information for an OpenSearch Ingestion pipeline
  • Access:  Read
  • Resources: 

    Name: pipeline

    Required: Yes

• GetPipelineBlueprint
  
  • Description:  Grants permission to get the contents of an OpenSearch Ingestion pipeline blueprint
  • Access:  Read
  • Resources: 

    Name: pipeline-blueprint

    Required: Yes

• GetPipelineChangeProgress
  
  • Description:  Grants permission to get granular information about the status of an OpenSearch Ingestion pipeline
  • Access:  Read
  • Resources: 

    Name: pipeline

    Required: Yes

• Ingest
  
  • Description:  Grants permission to ingest data through an OpenSearch Ingestion pipeline
  • Access:  Write
  • Resources: 

    Name: pipeline

    Required: Yes

• ListPipelineBlueprints
  
  • Description:  Grants permission to list the names of available blueprints for an OpenSearch Ingestion pipeline configuration
  • Access:  List
• ListPipelines
  
  • Description:  Grants permission to list basic configuration for each OpenSearch Ingestion pipeline in the current account and Region
  • Access:  List
• ListTagsForResource
  
  • Description:  Grants permission to list all resource tags associated with an OpenSearch Ingestion pipeline
  • Access:  Read
  • Resources: 

    Name: pipeline

    Required: Yes

• StartPipeline
  
  • Description:  Grants permission to start an OpenSearch Ingestion pipeline
  • Access:  Write
  • Resources: 

    Name: pipeline

    Required: Yes

• StopPipeline
  
  • Description:  Grants permission to stop an OpenSearch Ingestion pipeline
  • Access:  Write
  • Resources: 

    Name: pipeline

    Required: Yes

• TagResource
  
  • Description:  Grants permission to attach resource tags to an OpenSearch Ingestion pipeline
  • Access:  Tagging
  • Resources: 

    Name: pipeline

    Required: Yes

  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:TagKeys

• UntagResource
  
  • Description:  Grants permission to remove resource tags from an OpenSearch Ingestion Service pipeline
  • Access:  Tagging
  • Resources: 

    Name: pipeline

    Required: Yes

  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:TagKeys

• UpdatePipeline
  
  • Description:  Grants permission to modify the configuration of an OpenSearch Ingestion pipeline
  • Access:  Write
  • Resources: 

    Name: pipeline

    Required: Yes

• ValidatePipeline
  
  • Description:  Grants permission to validate the configuration of an OpenSearch Ingestion pipeline
  • Access:  Read

Resources

• pipeline
  
  • Arn:  arn:${Partition}:osis:${Region}:${Account}:pipeline/${PipelineName}
  • Conditions: 

    aws:ResourceTag/${TagKey}

• pipeline-blueprint
  
  • Arn:  arn:${Partition}:osis:${Region}:${Account}:blueprint/${BlueprintName}

Conditions

• aws:RequestTag/${TagKey}
  
  • Description:  Filters access by the tags that are passed in the request
  • Type:  String
• aws:ResourceTag/${TagKey}
  
  • Description:  Filters access by the tags associated with the resource
  • Type:  String
• aws:TagKeys
  
  • Description:  Filters access by the tag keys that are passed in the request
  • Type:  ArrayOfString