ResourcePolicy

Source: src/AWS/OSIS/ResourcePolicy.ts

The resource-based policy of an Amazon OpenSearch Ingestion (OSIS) pipeline — grants cross-account principals access to the pipeline, e.g. osis:Ingest for cross-account ingestion or osis:CreatePipelineEndpoint so another account can attach a VPC endpoint. A resource has at most one.

Creating a Resource Policy

const policy = yield* OSIS.ResourcePolicy("CrossAccountIngest", {
  resourceArn: pipeline.pipelineArn,
  policy: Output.interpolate`{
    "Version": "2012-10-17",
    "Statement": [
      {
        "Effect": "Allow",
        "Principal": { "AWS": "arn:aws:iam::123456789012:root" },
        "Action": ["osis:Ingest"],
        "Resource": "${pipeline.pipelineArn}"
      }
    ]
  }`,
});