Skip to content

Creates a security policy to be used by one or more OpenSearch Serverless collections

Description

Creates a security policy to be used by one or more OpenSearch Serverless collections. Security policies provide access to a collection and its OpenSearch Dashboards endpoint from public networks or specific VPC endpoints. They also allow you to secure a collection with a KMS encryption key. For more information, see Network access for Amazon OpenSearch Serverless and Encryption at rest for Amazon OpenSearch Serverless.

Usage

opensearchserviceserverless_create_security_policy(type, name,
  description, policy, clientToken)

Arguments

  • type

    [required] The type of security policy.

  • name

    [required] The name of the policy.

  • description

    A description of the policy. Typically used to store information about the permissions defined in the policy.

  • policy

    [required] The JSON policy document to use as the content for the new policy.

  • clientToken

    Unique, case-sensitive identifier to ensure idempotency of the request.

Value

A list with the following syntax:

list(
  securityPolicyDetail = list(
    type = "encryption"|"network",
    name = "string",
    policyVersion = "string",
    description = "string",
    policy = list(),
    createdDate = 123,
    lastModifiedDate = 123
  )
)

Request syntax

svc$create_security_policy(
  type = "encryption"|"network",
  name = "string",
  description = "string",
  policy = "string",
  clientToken = "string"
)