generated: '2026-07-15' method: generated source: openapi/amazon-opensearch-openapi.yml description: Recommended x-agentic-access execution contracts, classified heuristically from the OpenAPI. A governance starting point for exposing this API to AI agents — review and bind audience per deployment. See research/curity/agentic-governance/. summary: operations: 50 by_action_class: acting: 30 connected: 20 by_consequence: write: 28 read: 20 physical: 1 safety-critical: 1 human_in_the_loop_required: 1 operations: - path: /2015-01-01/es/ccs/inboundConnection/{ConnectionId}/accept method: put operationId: AcceptInboundCrossClusterSearchConnection x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /2015-01-01/tags method: post operationId: AddTags x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /2015-01-01/packages/associate/{PackageID}/{DomainName} method: post operationId: AssociatePackage x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /2015-01-01/es/domain/{DomainName}/authorizeVpcEndpointAccess method: post operationId: AuthorizeVpcEndpointAccess x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /2015-01-01/es/serviceSoftwareUpdate/cancel method: post operationId: CancelElasticsearchServiceSoftwareUpdate x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /2015-01-01/es/domain method: post operationId: CreateElasticsearchDomain x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /2015-01-01/es/ccs/outboundConnection method: post operationId: CreateOutboundCrossClusterSearchConnection x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /2015-01-01/packages method: post operationId: CreatePackage x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /2015-01-01/es/vpcEndpoints method: post operationId: CreateVpcEndpoint x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /2015-01-01/es/vpcEndpoints method: get operationId: ListVpcEndpoints x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /2015-01-01/es/domain/{DomainName} method: delete operationId: DeleteElasticsearchDomain x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /2015-01-01/es/domain/{DomainName} method: get operationId: DescribeElasticsearchDomain x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /2015-01-01/es/role method: delete operationId: DeleteElasticsearchServiceRole x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /2015-01-01/es/ccs/inboundConnection/{ConnectionId} method: delete operationId: DeleteInboundCrossClusterSearchConnection x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /2015-01-01/es/ccs/outboundConnection/{ConnectionId} method: delete operationId: DeleteOutboundCrossClusterSearchConnection x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /2015-01-01/packages/{PackageID} method: delete operationId: DeletePackage x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /2015-01-01/es/vpcEndpoints/{VpcEndpointId} method: delete operationId: DeleteVpcEndpoint x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /2015-01-01/es/domain/{DomainName}/autoTunes method: get operationId: DescribeDomainAutoTunes x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /2015-01-01/es/domain/{DomainName}/progress method: get operationId: DescribeDomainChangeProgress x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /2015-01-01/es/domain/{DomainName}/config method: get operationId: DescribeElasticsearchDomainConfig x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /2015-01-01/es/domain/{DomainName}/config method: post operationId: UpdateElasticsearchDomainConfig x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /2015-01-01/es/domain-info method: post operationId: DescribeElasticsearchDomains x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /2015-01-01/es/instanceTypeLimits/{ElasticsearchVersion}/{InstanceType} method: get operationId: DescribeElasticsearchInstanceTypeLimits x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /2015-01-01/es/ccs/inboundConnection/search method: post operationId: DescribeInboundCrossClusterSearchConnections x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /2015-01-01/es/ccs/outboundConnection/search method: post operationId: DescribeOutboundCrossClusterSearchConnections x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /2015-01-01/packages/describe method: post operationId: DescribePackages x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /2015-01-01/es/reservedInstanceOfferings method: get operationId: DescribeReservedElasticsearchInstanceOfferings x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /2015-01-01/es/reservedInstances method: get operationId: DescribeReservedElasticsearchInstances x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /2015-01-01/es/vpcEndpoints/describe method: post operationId: DescribeVpcEndpoints x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /2015-01-01/packages/dissociate/{PackageID}/{DomainName} method: post operationId: DissociatePackage x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /2015-01-01/es/compatibleVersions method: get operationId: GetCompatibleElasticsearchVersions x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /2015-01-01/packages/{PackageID}/history method: get operationId: GetPackageVersionHistory x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /2015-01-01/es/upgradeDomain/{DomainName}/history method: get operationId: GetUpgradeHistory x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /2015-01-01/es/upgradeDomain/{DomainName}/status method: get operationId: GetUpgradeStatus x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /2015-01-01/domain method: get operationId: ListDomainNames x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /2015-01-01/packages/{PackageID}/domains method: get operationId: ListDomainsForPackage x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /2015-01-01/es/instanceTypes/{ElasticsearchVersion} method: get operationId: ListElasticsearchInstanceTypes x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /2015-01-01/es/versions method: get operationId: ListElasticsearchVersions x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /2015-01-01/domain/{DomainName}/packages method: get operationId: ListPackagesForDomain x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /2015-01-01/tags/#arn method: get operationId: ListTags x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /2015-01-01/es/domain/{DomainName}/listVpcEndpointAccess method: get operationId: ListVpcEndpointAccess x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /2015-01-01/es/domain/{DomainName}/vpcEndpoints method: get operationId: ListVpcEndpointsForDomain x-agentic-access: action-class: connected consequence: read subject: optional token: max-ttl: 3600 audit: none - path: /2015-01-01/es/purchaseReservedInstanceOffering method: post operationId: PurchaseReservedElasticsearchInstanceOffering x-agentic-access: action-class: acting consequence: physical subject: required audience: null token: max-ttl: 300 exchange: true purpose-required: true escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /2015-01-01/es/ccs/inboundConnection/{ConnectionId}/reject method: put operationId: RejectInboundCrossClusterSearchConnection x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /2015-01-01/tags-removal method: post operationId: RemoveTags x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /2015-01-01/es/domain/{DomainName}/revokeVpcEndpointAccess method: post operationId: RevokeVpcEndpointAccess x-agentic-access: action-class: acting consequence: safety-critical subject: required audience: null token: max-ttl: 120 exchange: true purpose-required: true proof-of-possession: true escalation: human-in-the-loop: required audit: required - path: /2015-01-01/es/serviceSoftwareUpdate/start method: post operationId: StartElasticsearchServiceSoftwareUpdate x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /2015-01-01/packages/update method: post operationId: UpdatePackage x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /2015-01-01/es/vpcEndpoints/update method: post operationId: UpdateVpcEndpoint x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required - path: /2015-01-01/es/upgradeDomain method: post operationId: UpgradeElasticsearchDomain x-agentic-access: action-class: acting consequence: write subject: required audience: null token: max-ttl: 900 escalation: human-in-the-loop: conditional triggers: - abnormal - high-value audit: required