Finding missing permission for an opensearch role

Security
1

Versions (relevant - OpenSearch/Dashboard/Server OS/Browser): 2.11 AWS Openserch

Describe the issue: I am trying to an IAM Role in AWS access to a specific google-map-image index below is screenshot of permissions i have given and the error message, I know I am missing some permission but what, by the way the update by query is using painless script to update multiple documents, so which permission am I missing please help

Configuration:

Relevant Logs or Screenshots:

Error Message : ```
{“error”:"ResponseError: security_exception: [security_exception] Reason: no permissions for [indices:data/write/update/byquery] and User [name=arn:aws:iam::123456789:role/ecs-task-definition-role, backend_roles=[arn:aws:iam::123456789:role/ecs-task-definition-role], requestedTenant=null]


![image|690x352](upload://7wiz3PiHojYMnCk1ov6Q4Ip2Iwg.png)
2

Based on the error message, it looks like the ecs-task-definition-role is missing the indices:data/write/update/byquery permission. This is an index permission and would be added to the index_permissions section of a role.

3

this is the image , i tried to upload it in the post before , I already have given the permission for the same using the index group

image
image1869×956 91 KB

4

Please check my screenshot , I have already configured this permissions, still the error