Amazon OpenSearch Serverless (aoss)

Additions

Actions

• CancelIngestionJob
  
  • Description:  Grants permission to cancel an ingestion job
  • Access:  Write
  • Resources: 

    Name: IngestionJob

    Required: Yes

• CreateIngestionJob
  
  • Description:  Grants permission to create an ingestion job on a collection
  • Access:  Write
  • Resources: 

    Name: Collection

    Required: Yes

  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:TagKeys

• CreateIngestionStream
  
  • Description:  Grants permission to create an ingestion stream on a collection
  • Access:  Write
  • Resources: 

    Name: Collection

    Required: Yes

  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:TagKeys

• DeleteIngestionStream
  
  • Description:  Grants permission to delete an ingestion stream
  • Access:  Write
  • Resources: 

    Name: IngestionStream

    Required: Yes

• GetIngestionJob
  
  • Description:  Grants permission to get information about an ingestion job
  • Access:  Read
  • Resources: 

    Name: IngestionJob

    Required: Yes

• GetIngestionStream
  
  • Description:  Grants permission to get information about an ingestion stream
  • Access:  Read
  • Resources: 

    Name: IngestionStream

    Required: Yes

• ListIngestionJobs
  
  • Description:  Grants permission to list ingestion jobs for a collection
  • Access:  List
  • Resources: 

    Name: Collection

    Required: Yes

• ListIngestionStreams
  
  • Description:  Grants permission to list ingestion streams for a collection
  • Access:  List
  • Resources: 

    Name: Collection

    Required: Yes

Resources

• IngestionJob
  
  • Arn:  arn:${Partition}:aoss:${Region}:${Account}:collection/${CollectionId}/ingestion-job/${IngestionJobId}
  • Conditions: 

    aws:ResourceTag/${TagKey}

• IngestionStream
  
  • Arn:  arn:${Partition}:aoss:${Region}:${Account}:collection/${CollectionId}/ingestion-stream/${IngestionStreamId}
  • Conditions: 

    aws:ResourceTag/${TagKey}

Conditions

• aoss:DeletionProtection
  
  • Description:  Filters access by the deletion protection value set on a collection in the request. Valid values are enabled and disabled
  • Type:  String

Updates

Actions

• UpdateSecurityConfig
  
  Access
  
  • Write  ⟶  Tagging
  Resources
  
  • ＋ Collection
  • ＋ CollectionGroup
  • ＋ IngestionJob
  • ＋ IngestionStream
• UpdateSecurityPolicy
  
  Access
  
  • Write  ⟶  Tagging
  Resources
  
  • ＋ Collection
  • ＋ CollectionGroup
  • ＋ IngestionJob
  • ＋ IngestionStream
• UpdateIndex
  
  Resources
  
  • ＋ Collection
  • ＋ CollectionGroup
  • ＋ IngestionJob
  • ＋ IngestionStream