Permissions for @turbot/aws-cloudsearch

Taking a look at permissions and associated grant levels for each permission for CloudSearch:

PermissionGrant LevelHelp
cloudsearch:AddTagsOperator
cloudsearch:BuildSuggestersOperatorOptions / Configurations within domain
cloudsearch:CreateDomainAdmin
cloudsearch:DefineAnalysisSchemeOperatorOptions / Configurations within domain
cloudsearch:DefineExpressionOperatorOptions / Configurations within domain
cloudsearch:DefineIndexFieldOperatorOptions / Configurations within domain
cloudsearch:DefineIndexFieldsOperatorOptions / Configurations within domain
cloudsearch:DefineSuggesterOperatorOptions / Configurations within domain
cloudsearch:DeleteAnalysisSchemeOperatorOptions / Configurations within domain
cloudsearch:DeleteDomainAdmin
cloudsearch:DeleteExpressionOperatorOptions / Configurations within domain
cloudsearch:DeleteIndexFieldOperatorOptions / Configurations within domain
cloudsearch:DeleteSuggesterOperatorOptions / Configurations within domain
cloudsearch:DescribeAnalysisSchemesMetadata
cloudsearch:DescribeAvailabilityOptionsMetadata
cloudsearch:DescribeDomainsMetadata
cloudsearch:DescribeExpressionsMetadata
cloudsearch:DescribeIndexFieldsMetadata
cloudsearch:DescribeScalingParametersMetadata
cloudsearch:DescribeServiceAccessPoliciesMetadata
cloudsearch:DescribeSuggestersMetadata
cloudsearch:IndexDocumentsOperatorConfiguration of document index
cloudsearch:ListDomainNamesMetadata
cloudsearch:ListTagsMetadata
cloudsearch:RemoveTagsOperator
cloudsearch:UpdateAvailabilityOptionsOperator
cloudsearch:UpdateDomainEndpointOptionsAdminControls access policies -- higher level right
cloudsearch:UpdateScalingParametersOperator
cloudsearch:UpdateServiceAccessPoliciesAdminControls access policies -- higher level right
cloudsearch:documentOperatorAllows add replace delete documents in existing domains
cloudsearch:searchReadOnlyAllows search capabilities to read data
cloudsearch:suggestReadOnlyAllows search capabilities to read data