Technology Sharing

한어Русский языкEnglishFrançaisIndonesianSanskrit日本語DeutschPortuguêsΕλληνικάespañolItalianoSuomalainenLatina

Amazon OpenSearch Service (formerly Amazon Elasticsearch Service) is a hosted Elasticsearch service that provides powerful search, analysis, and visualization capabilities. To ensure the security and access control of the OpenSearch cluster, AWS provides a set of fine-grained permission management mechanisms. This article will introduce the common permission classification of OpenSearch in detail and provide corresponding JSON policy examples.

1. Domain management rights

These permissions allow users to create, update, delete, and view OpenSearch domains.

1.1 Creating and managing domains

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "es:CreateElasticsearchDomain",
        "es:DeleteElasticsearchDomain",
        "es:DescribeElasticsearchDomain",
        "es:UpdateElasticsearchDomainConfig"
      ],
      "Resource": "arn:aws:es:region:account-id:domain/*"
    }
  ]
}

1.2 View domain configuration

Only viewing of domain configuration is allowed, modification is not allowed.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "es:DescribeE