IAM / analytics / es

AWS Elasticsearch Service (IAM)

JSON →
AWSesanalytics

Amazon Elasticsearch Service (Amazon ES) makes it easy to deploy, operate, and scale Elasticsearch clusters in the AWS cloud.

iamaws
docs ↗
Permissions
Actions in this service
es:DescribeDomain
es:DescribeDomains
es:ListDomainNames
es:ListTags
es:GetIndex
es:CreateIndex
es:UpdateIndex
es:DeleteIndex
Policy
Minimal privilege example

Copy-paste least-privilege policy statement — not yet harness-verified.

{ "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": [ "es:DescribeDomain", "es:DescribeDomains", "es:ListDomainNames", "es:ListTags", "es:GetIndex", "es:CreateIndex", "es:UpdateIndex", "es:DeleteIndex" ], "Resource": "*" } ] }
SDK mapping
Method → permission

SDK method mapping (e.g. boto3.get_object() → s3:GetObject) is not yet collected.

Footguns
Known gotchas
Avoid es:* — grants full control including domain deletion and configuration changes.
Avoid es:DeleteDomain — can permanently remove an Elasticsearch domain and all its data.
Resources
docshttps://servicereference.us-east-1.amazonaws.com/v1/es/es.json ↗