Background information
AliyunServiceRoleForSearchEngine is a Resource Access Management (RAM) service-linked role for OpenSearch Vector Search Edition. OpenSearch Vector Search Edition uses this role to access other cloud services on your behalf. For more information, see Service-linked roles.
Scenarios
The data source feature of OpenSearch Vector Search Edition requires access to Object Storage Service (OSS) resources. The AliyunServiceRoleForSearchEngine service-linked role grants the required permissions.
Role description
Role name: AliyunServiceRoleForSearchEngine.
Role policy: AliyunServiceRoleForSearchEngine.
Sample authorization policy:
{
"Version": "1",
"Statement": [
{
"Effect": "Allow",
"Action": "oss:ListObjects",
"Resource": "*",
"Condition": {
"StringLike": {
"oss:Prefix": [
"*opensearch*"
]
}
}
},
{
"Effect": "Allow",
"Action": [
"oss:GetObject",
"oss:GetObjectAcl"
],
"Resource": "acs:oss:*:*:*/*opensearch*/*"
},
{
"Action": "ram:DeleteServiceLinkedRole",
"Resource": "*",
"Effect": "Allow",
"Condition": {
"StringEquals": {
"ram:ServiceName": "searchengine.aliyuncs.com"
}
}
}
]
}