Policy: AmazonOpenSearchIngestionServiceRolePolicy ARN: arn:aws:iam::aws:policy/aws-service-role/AmazonOpenSearchIngestionServiceRolePolicy Allowed Actions Actions Services cloudwatch:PutMetricData cloudwatch ec2:CreateTags ec2 ec2:CreateVpcEndpoint ec2 ec2:CreateVpcEndpoint ec2 ec2:DeleteVpcEndpoints ec2 ec2:DescribeSecurityGroups ec2 ec2:DescribeSubnets ec2 ec2:DescribeVpcEndpoints ec2