Permissions for @turbot/aws-elasticsearch
Taking a look at permissions and associated grant levels for each permission for Elasticsearch:
| Permission | Grant Level | Help |
|---|---|---|
| es:AddTags | Operator | Operator can configure existing domains. |
| es:CancelElasticsearchServiceSoftwareUpdate | Admin | |
| es:CreateElasticsearchDomain | Admin | |
| es:DeleteElasticsearchDomain | Admin | |
| es:DeleteElasticsearchServiceRole | Admin | |
| es:DescribeElasticsearchDomain | Metadata | |
| es:DescribeElasticsearchDomainConfig | Metadata | |
| es:DescribeElasticsearchDomains | Metadata | |
| es:DescribeElasticsearchInstanceTypeLimits | Metadata | |
| es:DescribeReservedElasticsearchInstanceOfferings | Metadata | |
| es:DescribeReservedElasticsearchInstances | Metadata | |
| es:ESHttpDelete | Operator | Operators can submit HTTP requests against existing domains. |
| es:ESHttpGet | ReadOnly | |
| es:ESHttpHead | ReadOnly | |
| es:ESHttpPost | Operator | Operators can submit HTTP requests against existing domains. |
| es:ESHttpPut | Operator | Operators can submit HTTP requests against existing domains. |
| es:GetCompatibleElasticsearchVersions | Metadata | |
| es:GetUpgradeHistory | Metadata | |
| es:GetUpgradeStatus | Metadata | |
| es:ListDomainNames | Metadata | |
| es:ListElasticsearchInstanceTypes | Metadata | |
| es:ListElasticsearchVersions | Metadata | |
| es:ListTags | Metadata | |
| es:PurchaseReservedElasticsearchInstance | Owner | |
| es:PurchaseReservedElasticsearchInstanceOffering | Owner | |
| es:RemoveTags | Operator | Operator can configure existing domains. |
| es:StartElasticsearchServiceSoftwareUpdate | Admin | |
| es:UpdateElasticsearchDomainConfig | Admin | Permission allows you to alter access policies. |
| es:UpgradeElasticsearchDomain | Admin |