Amazon OpenSearch Serverless (aoss)

Additions

Actions

• AddCollectionToCollectionGroup
  
  • Description:  Grants permission to add a serverless collection to a specified collection group
  • Access:  Write
  • Resources: 

    Name: CollectionGroup

    Required: Yes

  • Conditions: 

    aoss:collection-group

• BatchGetCollectionGroup
  
  • Description:  Grants permission to get attributes for one or more collection groups
  • Access:  Read
  • Conditions: 

    aoss:collection-group

• CreateCollectionGroup
  
  • Description:  Grants permission to create a serverless collection group
  • Access:  Write
  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:TagKeys

• DeleteCollectionGroup
  
  • Description:  Grants permission to delete a serverless collection group
  • Access:  Write
  • Resources: 

    Name: CollectionGroup

    Required: Yes

• ListCollectionGroups
  
  • Description:  Grants permission to list collection groups
  • Access:  List
• UpdateCollectionGroup
  
  • Description:  Grants permission to update a collection group
  • Access:  Write
  • Resources: 

    Name: CollectionGroup

    Required: Yes

Resources

• CollectionGroup
  
  • Arn:  arn:${Partition}:aoss:${Region}:${Account}:collection-group/${CollectionGroupId}
  • Conditions: 

    aws:ResourceTag/${TagKey}

Conditions

• aoss:collection-group
  
  • Description:  Filters access by the collection group name
  • Type:  String