Add more permissions for opensearch

ministryofjustice · Oct 5, 2023 · b1ead6e · b1ead6e
1 parent ad395b9
commit b1ead6e
Showing 1 changed file with 4 additions and 3 deletions.
diff --git a/opensearch.tf b/opensearch.tf
@@ -3,9 +3,10 @@ data "aws_iam_policy_document" "opensearch_for_github" {
     sid    = "AllowOpenSearchListDescribe"
     effect = "Allow"
     actions = [
-      "es:DescribeDomain",
-      "es:ListDomainNames",
-      "es:ListTags"
+      "es:Describe*",
+      "es:List*",
+      "es:GetCompatibleVersions",
+      "es:GetUpgradeHistory"
     ]
     resources = ["*"]
   }