Ensure that there is no wildcard action in ElasticSearch access policy
Amazon OpenSearch Service offers several ways to control access to your domains. They include Resource-based policies,Identity-based policies,IP-based policies. While writing policy statement make sure you DO NOT provide full access to any principle by mentioning WILDCARD like * in action.
Updated 7 months ago