Mods
AWS

IAM Role: AWS/Elasticsearch/Owner

PermissionGrant
es:PurchaseReservedElasticsearchInstanceOwner
es:PurchaseReservedElasticsearchInstanceOfferingOwner
es:CancelElasticsearchServiceSoftwareUpdateAdmin
es:CreateElasticsearchDomainAdmin
es:DeleteElasticsearchDomainAdmin
es:DeleteElasticsearchServiceRoleAdmin
es:StartElasticsearchServiceSoftwareUpdateAdmin
es:UpdateElasticsearchDomainConfigAdmin
es:UpgradeElasticsearchDomainAdmin
es:AddTagsOperator
es:ESHttpDeleteOperator
es:ESHttpPostOperator
es:ESHttpPutOperator
es:RemoveTagsOperator
es:ESHttpGetReadOnly
es:ESHttpHeadReadOnly
es:DescribeElasticsearchDomainMetadata
es:DescribeElasticsearchDomainConfigMetadata
es:DescribeElasticsearchDomainsMetadata
es:DescribeElasticsearchInstanceTypeLimitsMetadata
es:DescribeReservedElasticsearchInstanceOfferingsMetadata
es:DescribeReservedElasticsearchInstancesMetadata
es:GetCompatibleElasticsearchVersionsMetadata
es:GetUpgradeHistoryMetadata
es:GetUpgradeStatusMetadata
es:ListDomainNamesMetadata
es:ListElasticsearchInstanceTypesMetadata
es:ListElasticsearchVersionsMetadata
es:ListTagsMetadata