Guardrails is now 50% faster through smarter control evaluation →
Mods
AWS

IAM Role: AWS/OpenSearch/Admin

PermissionGrant
aoss:APIAccessAllAdmin
aoss:CreateAccessPolicyAdmin
aoss:CreateCollectionAdmin
aoss:CreateLifecyclePolicyAdmin
aoss:CreateSecurityConfigAdmin
aoss:CreateSecurityPolicyAdmin
aoss:CreateVpcEndpointAdmin
aoss:DashboardsAccessAllAdmin
aoss:DeleteAccessPolicyAdmin
aoss:DeleteCollectionAdmin
aoss:DeleteLifecyclePolicyAdmin
aoss:DeleteSecurityConfigAdmin
aoss:DeleteSecurityPolicyAdmin
aoss:DeleteVpcEndpointAdmin
aoss:UpdateAccessPolicyAdmin
aoss:UpdateAccountSettingsAdmin
aoss:UpdateCollectionAdmin
aoss:UpdateLifecyclePolicyAdmin
aoss:UpdateSecurityConfigAdmin
aoss:UpdateSecurityPolicyAdmin
aoss:UpdateVpcEndpointAdmin
es:AcceptInboundConnectionAdmin
es:AcceptInboundCrossClusterSearchConnectionAdmin
es:AddDataSourceAdmin
es:AddDirectQueryDataSourceAdmin
es:AddTagsAdmin
es:AssociatePackageAdmin
es:AssociatePackagesAdmin
es:AuthorizeVpcEndpointAccessAdmin
es:CancelDomainConfigChangeAdmin
es:CancelElasticsearchServiceSoftwareUpdateAdmin
es:CancelServiceSoftwareUpdateAdmin
es:CreateApplicationAdmin
es:CreateDomainAdmin
es:CreateElasticsearchDomainAdmin
es:CreateElasticsearchServiceRoleAdmin
es:CreateOutboundConnectionAdmin
es:CreateOutboundCrossClusterSearchConnectionAdmin
es:CreatePackageAdmin
es:CreateServiceRoleAdmin
es:CreateVpcEndpointAdmin
es:DeleteApplicationAdmin
es:DeleteDataSourceAdmin
es:DeleteDirectQueryDataSourceAdmin
es:DeleteDomainAdmin
es:DeleteElasticsearchDomainAdmin
es:DeleteElasticsearchServiceRoleAdmin
es:DeleteInboundConnectionAdmin
es:DeleteInboundCrossClusterSearchConnectionAdmin
es:DeleteOutboundConnectionAdmin
es:DeleteOutboundCrossClusterSearchConnectionAdmin
es:DeletePackageAdmin
es:DeleteVpcEndpointAdmin
es:ESHttpDeleteAdmin
es:ESHttpPatchAdmin
es:ESHttpPostAdmin
es:ESHttpPutAdmin
es:UpdateApplicationAdmin
es:UpdateDataSourceAdmin
es:UpdateDirectQueryDataSourceAdmin
es:UpdateDomainConfigAdmin
es:UpdateElasticsearchDomainConfigAdmin
es:UpdatePackageAdmin
es:UpdatePackageScopeAdmin
es:UpdateScheduledActionAdmin
es:UpdateVpcEndpointAdmin
es:UpgradeDomainAdmin
es:UpgradeElasticsearchDomainAdmin
aoss:TagResourceOperator
aoss:UntagResourceOperator
es:DissociatePackageOperator
es:DissociatePackagesOperator
es:PurchaseReservedElasticsearchInstanceOfferingOperator
es:PurchaseReservedInstanceOfferingOperator
es:RejectInboundConnectionOperator
es:RejectInboundCrossClusterSearchConnectionOperator
es:RemoveTagsOperator
es:RevokeVpcEndpointAccessOperator
es:StartDomainMaintenanceOperator
es:StartElasticsearchServiceSoftwareUpdateOperator
es:StartServiceSoftwareUpdateOperator
aoss:BatchGetCollectionMetadata
aoss:BatchGetEffectiveLifecyclePolicyMetadata
aoss:BatchGetLifecyclePolicyMetadata
aoss:BatchGetVpcEndpointMetadata
aoss:GetAccessPolicyMetadata
aoss:GetAccountSettingsMetadata
aoss:GetPoliciesStatsMetadata
aoss:GetSecurityConfigMetadata
aoss:GetSecurityPolicyMetadata
aoss:ListAccessPoliciesMetadata
aoss:ListCollectionsMetadata
aoss:ListLifecyclePoliciesMetadata
aoss:ListSecurityConfigsMetadata
aoss:ListSecurityPoliciesMetadata
aoss:ListTagsForResourceMetadata
aoss:ListVpcEndpointsMetadata
es:DescribeDomainMetadata
es:DescribeDomainAutoTunesMetadata
es:DescribeDomainChangeProgressMetadata
es:DescribeDomainConfigMetadata
es:DescribeDomainHealthMetadata
es:DescribeDomainNodesMetadata
es:DescribeDomainsMetadata
es:DescribeDryRunProgressMetadata
es:DescribeElasticsearchDomainMetadata
es:DescribeElasticsearchDomainConfigMetadata
es:DescribeElasticsearchDomainsMetadata
es:DescribeElasticsearchInstanceTypeLimitsMetadata
es:DescribeInboundConnectionsMetadata
es:DescribeInboundCrossClusterSearchConnectionsMetadata
es:DescribeInstanceTypeLimitsMetadata
es:DescribeOutboundConnectionsMetadata
es:DescribeOutboundCrossClusterSearchConnectionsMetadata
es:DescribePackagesMetadata
es:DescribeReservedElasticsearchInstanceOfferingsMetadata
es:DescribeReservedElasticsearchInstancesMetadata
es:DescribeReservedInstanceOfferingsMetadata
es:DescribeReservedInstancesMetadata
es:DescribeVpcEndpointsMetadata
es:ESCrossClusterGetMetadata
es:ESHttpGetMetadata
es:ESHttpHeadMetadata
es:GetApplicationMetadata
es:GetCompatibleElasticsearchVersionsMetadata
es:GetCompatibleVersionsMetadata
es:GetDataSourceMetadata
es:GetDirectQueryDataSourceMetadata
es:GetDomainMaintenanceStatusMetadata
es:GetPackageVersionHistoryMetadata
es:GetUpgradeHistoryMetadata
es:GetUpgradeStatusMetadata
es:ListApplicationsMetadata
es:ListDataSourcesMetadata
es:ListDirectQueryDataSourcesMetadata
es:ListDomainMaintenancesMetadata
es:ListDomainNamesMetadata
es:ListDomainsForPackageMetadata
es:ListElasticsearchInstanceTypeDetailsMetadata
es:ListElasticsearchInstanceTypesMetadata
es:ListElasticsearchVersionsMetadata
es:ListInstanceTypeDetailsMetadata
es:ListPackagesForDomainMetadata
es:ListScheduledActionsMetadata
es:ListTagsMetadata
es:ListVersionsMetadata
es:ListVpcEndpointAccessMetadata
es:ListVpcEndpointsMetadata
es:ListVpcEndpointsForDomainMetadata