Permissions for @turbot/aws-opensearch
Taking a look at permissions and associated grant levels for each permission for OpenSearch:
| Permission | Grant Level | Help |
|---|---|---|
| aoss:BatchGetCollection | Metadata | |
| aoss:BatchGetEffectiveLifecyclePolicy | Metadata | |
| aoss:BatchGetLifecyclePolicy | Metadata | |
| aoss:BatchGetVpcEndpoint | Metadata | |
| aoss:CreateAccessPolicy | Admin | |
| aoss:CreateCollection | Admin | |
| aoss:CreateLifecyclePolicy | Admin | |
| aoss:CreateSecurityConfig | Admin | |
| aoss:CreateSecurityPolicy | Admin | |
| aoss:CreateVpcEndpoint | Admin | |
| aoss:DeleteAccessPolicy | Admin | |
| aoss:DeleteCollection | Admin | |
| aoss:DeleteLifecyclePolicy | Admin | |
| aoss:DeleteSecurityConfig | Admin | |
| aoss:DeleteSecurityPolicy | Admin | |
| aoss:DeleteVpcEndpoint | Admin | |
| aoss:GetAccessPolicy | Metadata | |
| aoss:GetAccountSettings | Metadata | |
| aoss:GetPoliciesStats | Metadata | |
| aoss:GetSecurityConfig | Metadata | |
| aoss:GetSecurityPolicy | Metadata | |
| aoss:ListAccessPolicies | Metadata | |
| aoss:ListCollections | Metadata | |
| aoss:ListLifecyclePolicies | Metadata | |
| aoss:ListSecurityConfigs | Metadata | |
| aoss:ListSecurityPolicies | Metadata | |
| aoss:ListTagsForResource | Metadata | |
| aoss:ListVpcEndpoints | Metadata | |
| aoss:TagResource | Operator | |
| aoss:UntagResource | Operator | |
| aoss:UpdateAccessPolicy | Admin | |
| aoss:UpdateAccountSettings | Admin | |
| aoss:UpdateCollection | Admin | |
| aoss:UpdateLifecyclePolicy | Admin | |
| aoss:UpdateSecurityConfig | Admin | |
| aoss:UpdateSecurityPolicy | Admin | |
| aoss:UpdateVpcEndpoint | Admin | |
| aoss:APIAccessAll | Admin | |
| aoss:DashboardsAccessAll | Admin |