Minimum permission needed for an opensearch role mapped with an AWS opensearch role

2.11 (relevant - OpenSearch/Dashboard/Server OS/Browser):
The opensearch domain is configured with fine grained access control .

I have an AWS ingest pipeline with a corresponding aws pipeline role . This AWS role is mapped with an opensearch role we call it test-role .

Minimum permissions needed:

What are the minimum permissions needed for the test-role so that the pipeline can ingest data in a ‘search’ index.
As the beginning instead of using test-role I have tested the all-access role and it works of course but I want to use the least privielege to the opensearch role .
I tried with cluster_monitor as the cluster permission and data_access for the index permissions but it doesn’t work .

Configuration:

Relevant Logs or Screenshots:

Hi @normed,

Have you checked this Permissions - OpenSearch Documentation

Best,
mj

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.